CVE-2025-4720: SourceCodester Student Result Management System drop_student.php path traversal
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/dropstudent.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4720?
CVE-2025-4720 is classified as a critical vulnerability.
Which software is affected by CVE-2025-4720?
CVE-2025-4720 affects SourceCodester Student Result Management System version 1.0.
What kind of vulnerability is CVE-2025-4720?
CVE-2025-4720 is a path traversal vulnerability affecting the drop_student.php file.
How can CVE-2025-4720 be exploited?
CVE-2025-4720 can be exploited by manipulating the img parameter to access restricted file paths.
How do I fix CVE-2025-4720?
To fix CVE-2025-4720, ensure that user input for the img parameter is properly validated and sanitized.