CVE-2025-1599 — Relative Path Traversal in Best Church Management Software

CWE-23 — Relative Path TraversalCWE-24 — Path Traversal: '../filedir'CWE-22 — Path Traversal3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 64.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Best Church Management SoftwareMayurik Best Church Management Software
Timeline
PublishedFeb 24

Description

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/app/profile_crud.php. The manipulation of the argument old_cat_img leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-76q8-qpvr-6mhp: A vulnerability was found in SourceCodester Best Church Management Software 1↗2025-02-24
▶
CVEList
SourceCodester Best Church Management Software profile_crud.php path traversal↗2025-02-24
▶
CVE-2025-1599 — Relative Path Traversal | cvebase