CVE-2025-1599

Summary

CVE-2025-1599 is a newly disclosed vulnerability affecting the SourceCodester Best Church Management Software version 1.0. This issue, rated as problematic, impacts an unspecified functionality within the file /admin/app/profile_crud.php. An attacker can exploit this path traversal vulnerability by manipulating the old_cat_img argument, allowing them to access files located in the '../filedir' directory. This exploit can be executed remotely, and the code for it has already been made public. Despite early disclosure to the vendor, they have not responded to address the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.