PT-2025-22686 · Unknown · Jp Students Result Management System Premium

CVE-2025-31916

·

Published

2025-05-23

·

Updated

2025-05-23

CVSS v3.1

9.0

Critical

VectorAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions JP Students Result Management System Premium versions 1.1.7 through n/a
Description The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential control of the server.
Recommendations For JP Students Result Management System Premium versions 1.1.7 through n/a, consider restricting file upload capabilities to prevent the upload of dangerous file types until a patch is available. As a temporary workaround, restrict access to the file upload feature to minimize the risk of exploitation.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-31916

Affected Products

Jp Students Result Management System Premium