CVE-2025-10424: 1000projects Online Student Project Report Submission and Evaluation System faculty_controller.php unrestricted upload
A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/facultycontroller.php. This manipulation of the argument newimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10424?
CVE-2025-10424 is classified as a high severity vulnerability due to its potential for unrestricted file uploads.
How do I fix CVE-2025-10424?
To resolve CVE-2025-10424, implement file type validation and restrict uploads to specific file formats on the server.
What systems are affected by CVE-2025-10424?
CVE-2025-10424 affects the 1000projects Online Student Project Report Submission and Evaluation System version 1.0.
What type of vulnerability is CVE-2025-10424?
CVE-2025-10424 is an unrestricted file upload vulnerability that can lead to arbitrary code execution.
How can CVE-2025-10424 be exploited?
CVE-2025-10424 can be exploited by an attacker uploading malicious files through the admin controller without proper validation.