CVE-2025-4912: SourceCodester Student Result Management System Image File update_student.php path traversal
A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/core/updatestudent.php of the component Image File Handler. The manipulation of the argument oldphoto leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4912?
CVE-2025-4912 is classified as a critical vulnerability.
How do I fix CVE-2025-4912?
To fix CVE-2025-4912, ensure to update the SourceCodester Student Result Management System to the latest patched version.
What component is affected by CVE-2025-4912?
CVE-2025-4912 affects the Image File Handler functionality within the /admin/core/update_student.php file.
Can CVE-2025-4912 lead to unauthorized access?
Yes, CVE-2025-4912 can potentially allow unauthorized access and manipulation of student data.
What are the potential impacts of exploiting CVE-2025-4912?
Exploitation of CVE-2025-4912 could lead to data loss, unauthorized data manipulation, and compromise of the student result management system.