CVE-2025-10424

Name of the Vulnerable Software and Affected Versions 1000projects Online Student Project Report Submission and Evaluation System version 1.0

Description A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty controller.php. Manipulation of the argument new image causes unrestricted upload, and the attack is possible to be carried out remotely. The exploit has been publicly disclosed.

Recommendations Restrict access to the file /admin/controller/faculty controller.php to prevent unauthorized uploads. As a temporary workaround, consider restricting the use of the new image argument in the affected function until a patch is available.