CVE-2025-56295: Carmelo Computer Laboratory System

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.

Affected products

• Carmelo Computer Laboratory System: version 1.0 only

Published 2025-09-16. Last modified 2026-07-05.