CVE-2025-56295

7.3 highEPSS 0.3%

High (7.3) in carmelo computer laboratory system. EPSS 0.3% chance of exploitation in the next 30 days.

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2025-09-16
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

carmelo:computer_laboratory_system

References

https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.md
https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.md

Check your stack JSON