CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php

Critical · published January 27, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

🚨 A wily attacker could exploit a sneaky file upload vulnerability in code-projects Computer Book Store 1.0's admin_add.php! 🔥 Think of it like a delivery person who can sneak in any package without checking its contents — once inside, they can unleash whatever they want without anyone batting an eye! 🎭 An attacker could upload malicious files, potentially leading to full server compromise. This means they could access sensitive data, manipulate files, or even take control of the entire system. The consequences could be absolutely devastating!

Put simply

Think of it like a delivery person who can sneak in any package without checking its contents — once inside, they can unleash whatever they want without anyone batting an eye! 🎭 This vulnerability arises from insufficient validation of file uploads, allowing attackers to upload arbitrary files to the server. This can result in remote code execution and unauthorized access to sensitive information.

What to do

An attacker could upload malicious files, potentially leading to full server compromise. This means they could access sensitive data, manipulate files, or even take control of the entire system. The consequences could be absolutely devastating! Immediately patch to the latest version of code-projects Computer Book Store. Implement strict file type validation and limit upload permissions to trusted users only. Regularly audit your web application's file handling processes to ensure robust security measures are in place. You've got this! By taking immediate action, you'll be well on your way to securing your environment. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00581 · 47.0th percentile
Published
2026-01-27T00:00Z
EPSS history
Timeline
  • 27 JAN 00:00Z
    code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php
    cvelistv5