PT-2026-20478 · Unknown · Scholars Tracking System

Published 2026-02-18 · Updated 2026-02-19 · CVE-2025-70151

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Scholars Tracking System version 1.0

Description An authenticated attacker can achieve remote code execution through unrestricted file upload. The update profile picture.php and upload picture.php endpoints store uploaded files in a web-accessible uploads/ directory, using the original filename provided by the user without validating the file type or extension. An attacker can upload a PHP file and then request it from /uploads/, enabling the execution of arbitrary PHP code as the web server user.

Recommendations Apply restrictions to file uploads, including validating file types and extensions. Ensure uploaded files are not stored in a web-accessible directory. Rename uploaded files to prevent direct access and execution.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-70151

Affected Products

Scholars Tracking System

References · 6

• 🔥 https://youngkevinn.github.io/posts/CVE-2025-70151-Scholars-FileUpload-RCE · Exploit
• https://osv.dev/vulnerability/CVE-2025-70151 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-70151 · Security Note
• https://twitter.com/CVEnew/status/2024258103240478903 · Twitter Post
• https://code-projects.org/scholars-tracking-system-in-php-with-source-code · Note
• https://t.me/cveNotify/152467 · Telegram Post