CVE-2025-15213

A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Score

CVSS 4.0 5.3 Medium

Status

Analyzed - cna@vuldb.com

Published

2025-12-30

Last modified

2026-10-07

Weaknesses

CWE-266, CWE-285

Affected products

• Student File Management System (Code-projects)
• Student File Management System (Fabian)

References

• https://vuldb.com/?id.338598
• https://vuldb.com/?ctiid.338598
• https://vuldb.com/?submit.725080
• https://github.com/Bai-public/CVE/issues/5
• https://code-projects.org/