Cyber Posture

CVE-2025-0346

MediumPublic PoC

Published: 09 January 2025

Published
09 January 2025
Modified
27 February 2025
KEV Added
Patch
CVSS Score 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0005 16.7th percentile
Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-0346 is a medium-severity Improper Access Control (CWE-284) vulnerability in Code-Projects Content Management System. Its CVSS base score is 4.7 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Web Shell (T1505.003); ranked at the 16.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-3 (Malicious Code Protection).

Threat & Defense at a Glance

What attackers do: exploitation maps to Web Shell (T1505.003) and 2 other techniques. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly prevents exploitation by validating the 'image' argument in /admin/publishnews.php to reject dangerous or invalid file uploads.

prevent

Restricts the types and quantities of files accepted via the 'image' parameter, blocking unrestricted uploads of dangerous types in the Publish News Page component.

preventdetect

Scans and eradicates malicious code in files uploaded through the vulnerable endpoint, mitigating impacts even if uploads succeed.

MITRE ATT&CK Enterprise TechniquesAI

T1505.003 Web Shell Persistence
Adversaries may backdoor web servers with web shells to establish persistent access to systems.
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1608.002 Upload Tool Resource Development
Adversaries may upload tools to third-party or adversary controlled infrastructure to make it accessible during targeting.
Why these techniques?

The unrestricted file upload vulnerability in the admin panel allows authenticated attackers to upload PHP webshells disguised as images, enabling web shell deployment (T1100, T1505.003), exploitation of a public-facing application (T1190), and staging of tools (T1608.002).

NVD Description

A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to unrestricted…

more

upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Deeper analysisAI

CVE-2025-0346 is a critical vulnerability in code-projects Content Management System version 1.0, affecting the /admin/publishnews.php file within the Publish News Page component. The issue stems from manipulation of the 'image' argument, enabling unrestricted file upload. Classified under CWE-284 (Improper Access Control) and CWE-434 (Unrestricted Upload of File with Dangerous Type), it carries a CVSS v3.1 base score of 4.7 (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) and was published on 2025-01-09.

An attacker with high privileges, such as an authenticated administrator, can exploit this remotely over the network with low complexity and no user interaction required. Successful exploitation allows limited impacts: low confidentiality, integrity, and availability effects, potentially through uploading malicious files via the vulnerable endpoint.

Advisories and related details are documented on VulDB (ctiid.290859, id.290859, submit.476728), the project site at code-projects.org, and a public exploit gist at github.com/Lytes/266e5fa6eb4506fe2c7e35166664249a. No specific patch or mitigation steps are detailed in the available references.

The exploit has been publicly disclosed and may be actively used by attackers.

Details

CWE(s)

Affected Products

code-projects
content management system
1.0

CVEs Like This One

CVE-2026-0566Same product: Code-Projects Content Management System
CVE-2026-0546Same product: Code-Projects Content Management System
CVE-2026-0567Same product: Code-Projects Content Management System
CVE-2026-0565Same product: Code-Projects Content Management System
CVE-2025-2973Same vendor: Code-Projects
CVE-2025-7413Same vendor: Code-Projects
CVE-2025-8255Same vendor: Code-Projects
CVE-2025-7412Same vendor: Code-Projects
CVE-2025-0206Same vendor: Code-Projects
CVE-2024-57487Same vendor: Code-Projects

References