CVE-2025-4310
itsourcecode Content Management System add_topic.php unrestricted upload
- State
- Published
- Severity
- 5.1 Medium
- Published
- May 6, 2025
- Updated
- May 6, 2025
- Reserved
- May 5, 2025
Description
A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. This affects an unknown part of the file /admin/add_topic.php?category=BBS. The manipulation of the argument Cover Image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.7 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 4.7 Medium | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 5.8 Medium | AV:N/AC:L/Au:M/C:P/I:P/A:P | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Content Management Systemitsourcecode |
|
References
- VDB-307413 | itsourcecode Content Management System add_topic.php unrestricted uploadvdb-entrytechnical-description
- VDB-307413 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #564206 | itsourcecode Content Management System V1.0 Unrestricted Uploadthird-party-advisory
- https://github.com/ZhaoxuepengS/CVE-vul/issues/1exploitissue-tracking
- https://itsourcecode.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.