CVE-2025-9438: 1000projects Online Project Report Submission and Evaluation System add_student.php cross site scripting
A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected is an unknown function of the file /admin/addstudent.php. The manipulation of the argument address results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9438?
CVE-2025-9438 has been classified as a high severity vulnerability due to its potential impact on user data and system integrity.
How do I fix CVE-2025-9438?
To fix CVE-2025-9438, ensure input validation and sanitization on the /admin/add_student.php file to prevent XSS attacks.
What types of attacks can exploit CVE-2025-9438?
CVE-2025-9438 can be exploited through cross-site scripting (XSS) attacks, which allow attackers to execute scripts in the user's browser.
Who is affected by CVE-2025-9438?
CVE-2025-9438 affects users of the 1000projects Online Project Report Submission and Evaluation System version 1.0.
What are the consequences of exploiting CVE-2025-9438?
Exploiting CVE-2025-9438 can lead to unauthorized actions being performed in the context of the victim user's session, potentially compromising account security.