CVE Feed

    Dashboard / CVE / CVE-2025-10425

    CVE-2025-10425

    A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation of the argument new_image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.

    Published:Sep 15, 2025
    Last Modified:Sep 18, 2025
    EPS:Sep 15, 2025
    EPSS Score:0.00041
    CVSS Score:7.3

    Affected Products

    Vendor
    1000projects
    Product
    Online Student Project Report Submission And Evaluation System

    Exploits

    https://github.com/lan041221/cvec/issues/23

    Related CVEs

    CVE-2025-10424 (CVSS 5.5) — A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System …
    CVE-2025-9444 (CVSS 5.5) — A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. Thi…
    CVE-2025-9440 (CVSS 2.1) — A security vulnerability has been detected in 1000projects Online Project Report Submission and Evaluation Sys…
    CVE-2025-9439 (CVSS 2.1) — A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Aff…
    CVE-2025-9438 (CVSS 2.1) — A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0…
    CVE-2025-9434 (CVSS 2.1) — A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0. Thi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High