A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/0xffaaa/cve/blob/main/Pre_School_Management_System_Arbitrary_File_Deletion_Vulnerabilit.md | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/?ctiid.333328 | Permissions Required VDB Entry |
| https://vuldb.com/?id.333328 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.697083 | Third Party Advisory VDB Entry |
| https://www.sourcecodester.com/ | Product |
Configurations
History
02 Dec 2025, 03:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/0xffaaa/cve/blob/main/Pre_School_Management_System_Arbitrary_File_Deletion_Vulnerabilit.md - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.333328 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.333328 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.697083 - Third Party Advisory, VDB Entry | |
| References | () https://www.sourcecodester.com/ - Product | |
| First Time |
Kimz190
Kimz190 pre-school Management System |
|
| CPE | cpe:2.3:a:kimz190:pre-school_management_system:1.0:*:*:*:*:*:*:* |
23 Nov 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-23 19:15
Updated : 2025-12-02 03:30
NVD link : CVE-2025-13564
Mitre link : CVE-2025-13564
CVE.ORG link : CVE-2025-13564
JSON object : View
Products Affected
kimz190
- pre-school_management_system
CWE
CWE-404
Improper Resource Shutdown or Release