Vulnerability · Published Aug 1, 2025 · Assigned by VulDB
CVE-2025-8435code-projects Online Movie Streaming admin-control.php authorization
High 7.3
In plain English
A high-severity missing authorization in Online Movie Streaming from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Official description
A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-control.php. The manipulation of the argument ID leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Online Movie Streaming | 1.0 |
Weakness: CWE-862, CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-318463 | code-projects Online Movie Streaming admin-control.php authorization vdb-entry, technical-description
- VDB-318463 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- https://github.com/i-Corner/cve/issues/15 exploit, issue-tracking
- https://code-projects.org/ product