CNNVD-202512-2160 Information

CNNVD ID

CNNVD-202512-2160

CVE-2025-14530

  • CNNVD Published: 2025-12-11

Description (Chinese)

SourceCodester Real Estate Property Listing App是SourceCodester开源的一个房地产上市应用程序。 SourceCodester Real Estate Property Listing App 1.0版本存在安全漏洞,该漏洞源于对文件/admin/property.php中参数image的错误操作,可能导致任意文件上传。

Description (English)

SourceCodester Real Estate Property Listing App is a real estate listed application from SourceCodester. The security loophole in version 1.0 of SourceCodester Real Estate Processing App is the result of a mishandling of the parameter image in file/admin/policy.php, which could lead to any upload.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

SourceCodester

Published

2025-12-11

Last Modified

2026-02-24

References

https://github.com/zzdzz7/cve/issues/2 https://vuldb.com/?ctiid.335871 https://vuldb.com/?id.335871 https://vuldb.com/?submit.703238 https://www.sourcecodester.com/

Share on: