CVE-2025-4735 – CVE-2025-4735 is a critical unrestricted file u... (How to Fix)

Q: What is the severity of CVE-2025-4735?

CVE-2025-4735 has a CVSS score of 6.3 (MEDIUM). CVE-2025-4735 is a critical unrestricted file upload vulnerability in Campcodes Sales and Inventory System 1.0. Attackers can remotely upload malicious files via the Picture parameter in /pages/product.php, potentially leading to server compromise. All users of Campcodes Sales and Inventory System 1.0 are affected.

📋 TL;DR

CVE-2025-4735 is a critical unrestricted file upload vulnerability in Campcodes Sales and Inventory System 1.0. Attackers can remotely upload malicious files via the Picture parameter in /pages/product.php, potentially leading to server compromise. All users of Campcodes Sales and Inventory System 1.0 are affected.

💻 Affected Systems

Products:

Campcodes Sales and Inventory System

Versions: 1.0

Operating Systems: Any OS running PHP web server

Default Config Vulnerable: ⚠️ Yes

Notes: All installations of version 1.0 are vulnerable by default

📦 What is this software?

Sales And Inventory System by Campcodes

View all CVEs affecting Sales And Inventory System →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete server takeover through remote code execution, data theft, and system compromise

🟠

Likely Case

Webshell deployment leading to data exfiltration, privilege escalation, and lateral movement

🟢

If Mitigated

File upload attempts blocked with no successful exploitation

🌐 Internet-Facing: HIGH - Remote exploitation without authentication makes internet-facing instances extremely vulnerable

🏢 Internal Only: MEDIUM - Internal systems still vulnerable but attack surface is reduced

🎯 Exploit Status

Public PoC: ⚠️ Yes

Weaponized: LIKELY

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Public exploit available on GitHub, simple file upload exploitation

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Unknown

Vendor Advisory: https://www.campcodes.com/

Restart Required: No

Instructions:

No official patch available. Consider migrating to alternative software or implementing workarounds.

🔧 Temporary Workarounds

Web Application Firewall (WAF) Rules

all

Block file uploads to /pages/product.php or restrict uploads to specific file types

File Upload Validation

all

Implement server-side file type validation and rename uploaded files

🧯 If You Can't Patch

Restrict access to /pages/product.php using IP whitelisting or authentication
Disable file upload functionality entirely if not required

🔍 How to Verify

Check if Vulnerable:

Attempt to upload a file with malicious extension to /pages/product.php?Picture= parameter

Check Version:

Check system version in admin panel or configuration files

Verify Fix Applied:

Test that file uploads are properly validated and malicious files are rejected

📡 Detection & Monitoring

Log Indicators:

Multiple file upload attempts to /pages/product.php
Uploads of executable file types (.php, .exe, .jsp)

Network Indicators:

POST requests to /pages/product.php with file uploads
Unusual file types in upload requests

SIEM Query:

source="web_logs" AND uri="/pages/product.php" AND method="POST" AND (file_extension="php" OR file_extension="exe" OR file_extension="jsp")

📊 Metadata

CVE ID: CVE-2025-4735

CVSS v3 Score: 6.3 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE: CWE-284

EPSS Score: 0.13% exploit probability (31.9th percentile)

Published: May 16, 2025

Last Updated: May 28, 2025

🔗 References

https://github.com/2319797429/CVE/issues/2 Exploit,Issue Tracking,Third Party Advisory
https://vuldb.com/?ctiid.309037 Permissions Required
https://vuldb.com/?id.309037 Third Party Advisory,VDB Entry
https://vuldb.com/?submit.570715 Third Party Advisory,VDB Entry
https://www.campcodes.com/ Product

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-4735, you might also want to check these: