Description
A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
Related CPE's
References
https://github.com/Limingqian123/CVE/issues/7
https://vuldb.com/?ctiid.338584
https://vuldb.com/?submit.724721
https://github.com/Limingqian123/CVE/issues/7
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
4.7 · Medium
Information
Source identifier
Vulnerability status
Analyzed
Published
2025-12-29T17:15:44.713Z
3 weeks agoLast modified
2026-01-07T20:50:58.900Z
2 weeks ago