PT-2025-20527 · Unknown · Sourcecodester Online Student Clearance System

Colorado-All · Published 2025-05-09 · Updated 2025-05-14 · CVE-2025-4468

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0

Description A critical issue affects the processing of the file "/edit-photo.php". The manipulation of the userImage argument leads to unrestricted upload. The attack may be initiated remotely.

Recommendations For SourceCodester Online Student Clearance System version 1.0, consider restricting access to the "/edit-photo.php" file to minimize the risk of exploitation. As a temporary workaround, avoid using the userImage argument in the affected file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2025-4468

Affected Products

Sourcecodester Online Student Clearance System

References · 13

• 🔥 https://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/upload.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4468 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4468 · Vendor Advisory
• https://vuldb.com/?ctiid.308087 · Note
• https://t.me/cvetracker/23469 · Telegram Post
• https://t.me/cvenotify/122235 · Telegram Post
• https://twitter.com/CVEnew/status/1920794046026629409 · Twitter Post
• https://vuldb.com/?id.308087 · Note
• https://twitter.com/VulmonFeeds/status/1920753960194867246 · Twitter Post
• https://t.me/cvedetector/24919 · Telegram Post
• https://sourcecodester.com · Note
• https://vuldb.com/?submit.566246 · Note
• https://t.me/latest_high_impact_cve/2312 · Telegram Post