CVE-2025-2606 in SourceCodester Best Church Management Software
Zusammenfassung (Englisch)
A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/soulwinning_crud.php. The manipulation of the argument photo/photo1 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Veröffentlichung
21.03.2025
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 300589 | SourceCodester Best Church Management Software soulwinning_crud.php erweiterte Rechte | 434 | Proof-of-Concept | Nicht definiert | CVE-2025-2606 |