CVE-2025-14195

Published December 7th, 2025

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/add_file_query.php. The manipulation of the argument per_file results in unrestricted upload. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

shenxianyuguitian/employee-management-UFU

Proof-of-Concept and Advisory for Employee Profile Management System Unrestricted File Upload

GitHub