CVE-2025-4898: SourceCodester Student Result Management System Logo File update_system.php unlink path traversal
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file updatesystem.php of the component Logo File Handler. The manipulation of the argument oldlogo leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4898?
CVE-2025-4898 has been declared as a critical vulnerability.
How does CVE-2025-4898 affect the SourceCodester Student Result Management System?
CVE-2025-4898 affects the unlink function in the update_system.php file, leading to a path traversal vulnerability.
What component is impacted by CVE-2025-4898?
The Logo File Handler component is impacted by CVE-2025-4898.
What is the cause of CVE-2025-4898?
The manipulation of the argument old_logo in the system leads to the path traversal issue identified in CVE-2025-4898.
How can I fix CVE-2025-4898?
To fix CVE-2025-4898, update the SourceCodester Student Result Management System to the latest patched version.