A vulnerability has been found in code-projects Library... · CVE-2025-6900 · GitHub Advisory Database · GitHub

A vulnerability has been found in code-projects Library...

Moderate severity Unreviewed Published Jun 30, 2025 to the GitHub Advisory Database • Updated Jul 1, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References

Published by the National Vulnerability Database

Jun 30, 2025

Published to the GitHub Advisory Database Jun 30, 2025

Last updated Jul 1, 2025

Weaknesses

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Learn more on MITRE.

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. Learn more on MITRE.