VulnerabilityModified
CVE-2025-11426
Affected by this vulnerability is an unknown functionality of the file /edit_book.php.
LOW 2.1EPSS 0.33%
Does this matter?
Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own.
Description
A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_book.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
- CVSS 4.0
- 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.33% probability · 26th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284, CWE-434
- Affected
- projectworlds/advanced library management system
- Source
- cna@vuldb.com
References
- https://github.com/ChenGuangHuangHun/CVE/issues/3Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.327361Permissions Required, VDB Entry
- https://vuldb.com/?id.327361Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.666228Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.