← Back

Computer Laboratory System

computer_laboratory_system

Vendor: Carmelo • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-14642
1Carmelo
1Computer Laboratory System
Apr 29, 2026
Dec 14, 2025
2.0 LOW· v4
7.2 HIGH· v3
5.8 MEDIUM· v2
A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technical_staff_pic.php. Such manipulation of the argument image leads to unrestricted upload. T...Show more
A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technical_staff_pic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2025-14641
1Carmelo
1Computer Laboratory System
Apr 29, 2026
Dec 14, 2025
2.0 LOW· v4
7.2 HIGH· v3
5.8 MEDIUM· v2
A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/admin_pic.php. This manipulation of the argument image causes unrestricted upload. The a...Show more
A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/admin_pic.php. This manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely. The exploit has been published and may be used.Show less
CVE-2025-60307
1Carmelo
1Computer Laboratory System
Oct 21, 2025
Oct 10, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts.
CVE-2025-56295
1Carmelo
1Computer Laboratory System
Sep 18, 2025
Sep 16, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools...Show more
code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.Show less