High severity7.3NVD Advisory· Published Jun 7, 2025· Updated Jun 17, 2026

CVE-2025-5840

Description

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_update_customer_order.php. The manipulation of the argument uploaded_file leads to unrestricted upload. It is possible to initiate the attack remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sourcecodester/Client Database Management Systemllm-fuzzy
Range: 1.0
Lerouxyxchire/Client Database Management System
cpe:2.3:a:lerouxyxchire:client_database_management_system:1.0:*:*:*:*:*:*:*
Sourcecodester/Downloading Client Database Management Systemcpe-rescue
Range: 1.0

Patches

Vulnerability mechanics

References

github.com/592833263/cve/issues/1nvdExploitIssue TrackingThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
www.sourcecodester.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000