PT-2025-38224 · Sourcecodester · Online Exam Form Submission

Quchunyi2 · Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-10600

NVD

CVSS v2.0

7.5

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A flaw has been found in SourceCodester Online Exam Form Submission 1.0. This impacts an unknown function of the file /register.php. This manipulation of the argument img causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2025-10600

Affected Products

Online Exam Form Submission

References · 6

• 🔥 https://github.com/qcycop0101-hash/CVE/issues/18 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10600 · Security Note
• https://vuldb.com/?ctiid.324620 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/?submit.649541 · Note
• https://vuldb.com/?id.324620 · Note