Lucene search
K

9 matches found

OSV
OSV
added 2025/09/15 4:15 a.m.0 views

CVE-2025-10424

A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/facultycontroller.php. This manipulation of the argument newimage causes unrestricted upload. The attack is...

9.8CVSS5.6AI score
Exploits0References5
NVD
NVD
added 2025/09/15 4:15 a.m.1 views

CVE-2025-10424

A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/facultycontroller.php. This manipulation of the argument newimage causes unrestricted upload. The attack is...

9.8CVSS0.00116EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/09/15 4:2 a.m.8 views

CVE-2025-10425 1000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted upload

A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/studentcontroller.php. Such manipulation of the argument newimage leads to unrestricted upload. The attack m...

7.5CVSS0.00116EPSS
Exploits1References5
CVE
CVE
added 2025/09/15 4:2 a.m.12 views

CVE-2025-10425

CVE-2025-10425 affects 1000projects Online Student Project Report Submission and Evaluation System 1.0. The vulnerability is in an unknown function of /admin/controller/student_controller.php, where manipulation of the new_image argument leads to unrestricted file uploads. The issue can be exploi...

9.8CVSS6.3AI score0.00116EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/15 3:32 a.m.6 views

CVE-2025-10424 1000projects Online Student Project Report Submission and Evaluation System faculty_controller.php unrestricted upload

A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/facultycontroller.php. This manipulation of the argument newimage causes unrestricted upload. The attack is...

7.5CVSS0.00116EPSS
Exploits1References5
CVE
CVE
added 2025/09/15 3:32 a.m.11 views

CVE-2025-10424

CVE-2025-10424 affects 1000projects Online Student Project Report Submission and Evaluation System version 1.0. The vulnerability is in /admin/controller/faculty_controller.php, where manipulation of the argument new_image enables unrestricted file uploads and can be exploited remotely. Public di...

9.8CVSS7.2AI score0.00116EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/26 3:2 a.m.6 views

CVE-2025-9444 1000projects Online Project Report Submission and Evaluation System delete_group_student.php sql injection

A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue affects some unknown processing of the file /admin/controller/deletegroupstudent.php. The manipulation of the argument batchid leads to sql injection. The attack can be initiated...

7.5CVSS0.00099EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/08/26 1:32 a.m.7 views

CVE-2025-9438 1000projects Online Project Report Submission and Evaluation System add_student.php cross site scripting

A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected is an unknown function of the file /admin/addstudent.php. The manipulation of the argument address results in cross site scripting. The attack can be executed remotely. The...

5.3CVSS0.00086EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/08/26 1:2 a.m.6 views

CVE-2025-9434 1000projects Online Project Report Submission and Evaluation System edit_title.php cross site scripting

A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0. This affects an unknown function of the file /admin/edittitle.php?id=1. Executing manipulation of the argument desc can lead to cross site scripting. The attack may be launched remotely. The...

5.3CVSS0.00086EPSS
Exploits1References4
Rows per page
Query Builder