CVE-2025-10425: 1000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted upload
A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/studentcontroller.php. Such manipulation of the argument newimage leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10425?
The severity of CVE-2025-10425 is classified as high due to the potential for unrestricted file uploads.
How do I fix CVE-2025-10425?
To fix CVE-2025-10425, validate and restrict file uploads by implementing strict file type checks and size limits.
What does CVE-2025-10425 affect?
CVE-2025-10425 affects the 1000projects Online Student Project Report Submission and Evaluation System 1.0.
What type of attack can CVE-2025-10425 enable?
CVE-2025-10425 can enable attackers to upload malicious files, potentially leading to remote code execution.
Where in the codebase is CVE-2025-10425 located?
CVE-2025-10425 is located in the file /admin/controller/student_controller.php.