THREAT OPS › Threat News › [NVD] CVE-2025-70141 (CRITICAL 9.4) — SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in admin_class.php based on the action parameter. An unauthentica
[NVD] CVE-2025-70141 (CRITICAL 9.4) — SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in admin_class.php based on the action parameter. An unauthentica
CVE-2025-70141 CVSS: 9.4 CRITICAL Published: 2026-02-18T17:21:35.700
SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in admin_class.php based on the action parameter. An unauthenticated remote attacker can perform sensitive operatio
Indicators of compromise
- CVE-2025-70141cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-70141