CVE-2025-15050
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A security vulnerability has been detected in code-projects Student File Management System 1.0. This affects an unknown part of the file /save_file.php. Manipulation of the argument File leads to unrestricted upload, and the attack can be executed remotely.
Risk Assessment
A publicly disclosed exploit allows uploading arbitrary files, which can result in remote code execution or system compromise.
Recommendation
Update the application to a version containing the fix or implement validation of file extensions and MIME types for uploaded files. Restrict access to /save_file.php.
Other vulnerabilities in Student File Management System
See all- CVE-2025-15205Medium
A vulnerability was identified in code-projects Student File Management System 1.0. It affects an unknown functionality in the file /download.php. Manipulation of the argument istore_id leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2025-14663Low
A vulnerability was determined in code-projects Student File Management System 1.0. Manipulation in the file /admin/update_student.php leads to cross site scripting. The attack may be launched remotely and the exploit has been publicly disclosed.
- CVE-2025-14662Low
A vulnerability was found in code-projects Student File Management System 1.0. It affects an unknown part of the file /admin/update_user.php in the Update User Page component. Manipulation leads to cross site scripting. The attack may be initiated remotely and the exploit has been made public.
Original NVD description (English source)
A security vulnerability has been detected in code-projects Student File Management System 1.0. This affects an unknown part of the file /save_file.php. Such manipulation of the argument File leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS