Volerion logoVolerion
Volerion logoVolerion

Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

Code-Projects Fabian Ros Library Management System Unrestricted File Upload Vulnerability

Vulnerability

A critical vulnerability allowing unrestricted file uploads has been identified in Code-Projects Fabian Ros Library Management System version 2.0. The issue arises in the file admin/profile_update.php, where the photo parameter is not properly sanitized, enabling arbitrary file uploads. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability could lead to arbitrary file uploads, which may allow attackers to upload malicious files that could be executed on the server or used to compromise the application.

Reproduction

To reproduce this vulnerability, send a request to the admin/profile_update.php file with an unsanitized photo parameter. This can be done by manipulating the upload request to include a file that exploits the unrestricted upload capability.

Added: Jul 9, 2025, 2:20 AM
Updated: Jul 9, 2025, 2:20 AM

Vulnerability Rating

Custom Algorithm
spread
0.8
impact
7.5
exploitability
6.9
remediation
0.0
relevance
0.2
threat
8.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.