Computer Laboratory System vulnerabilities

2 known vulnerabilities in Computer Laboratory System from Carmelo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Computer Laboratory System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-60307Oct 10, 2025Carmelo

  code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts.

• 7.3 High severity

  Computer Laboratory System: Unrestricted Upload of File with Dangerous Type

  CVE-2025-56295Sep 16, 2025Carmelo

  code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.