Description
A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been classified as critical. Affected is an unknown function of the file /admin.php. The manipulation of the argument ID leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-01
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-23336 A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been classified as critical. Affected is an unknown function of the file /admin.php. The manipulation of the argument ID leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
History

Tue, 05 Aug 2025 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Anisha
Anisha online Movie Streaming
CPEs cpe:2.3:a:anisha:online_movie_streaming:1.0:*:*:*:*:*:*:*
Vendors & Products Anisha
Anisha online Movie Streaming

Mon, 04 Aug 2025 09:30:00 +0000

Type Values Removed Values Added
First Time appeared Code Projects
Code Projects online Movie Streaming
Vendors & Products Code Projects
Code Projects online Movie Streaming

Fri, 01 Aug 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 01 Aug 2025 04:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been classified as critical. Affected is an unknown function of the file /admin.php. The manipulation of the argument ID leads to missing authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Title code-projects Online Movie Streaming admin.php authorization
Weaknesses CWE-862
CWE-863
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Anisha Online Movie Streaming
Code Projects Online Movie Streaming
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2025-08-01T13:45:40.728Z

Reserved: 2025-07-31T18:52:40.868Z

Link: CVE-2025-8434

cve-icon Vulnrichment

Updated: 2025-08-01T13:45:31.239Z

cve-icon NVD

Status : Analyzed

Published: 2025-08-01T04:16:22.383

Modified: 2026-04-29T01:00:01.613

Link: CVE-2025-8434

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-08-04T09:00:47Z

Weaknesses