What’s Vulnerable › Vulnerabilities

CVE-2025-13564: SourceCodester Pre-School Management System FilehelperController.php removefile denial of service

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-11-23 · updated 2026-10-08
• Weakness: CWE-404

Description

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

Affected products

• SourceCodester Pre-School Management System: 1.0

References

• https://github.com/0xffaaa/cve/blob/main/Pre_School_Management_System_Arbitrary_File_Deletion_Vulnerabilit.md
• https://vuldb.com/?ctiid.333328
• https://vuldb.com/?id.333328
• https://vuldb.com/?submit.697083
• https://www.sourcecodester.com/

Get alerted when CVE-2025-13564 or the next vulnerability affects your stack