CVE-2025-70151CWE-434unrestricted-file-upload

CVE-2025-70151

High · published February 18, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied filename without validating the file type or extension. By uploading a PHP file and then requesting it from /uploads/, an attacker can execute arbitrary PHP code as the web server user.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00788 · 55.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-02-18T23:24Z
Affected products (1)
ProductVersionsFixed in
fabian/scholars_tracking_systemall versions—
References (3)
https://0x0bito.github.io/posts/CVE-2025-70151-Scholars-FileUpload-RCE/ · [email protected]https://code-projects.org/scholars-tracking-system-in-php-with-source-code/ · [email protected]https://youngkevinn.github.io/posts/CVE-2025-70151-Scholars-FileUpload-RCE/ · [email protected]
EPSS history
Timeline
  • 18 FEB 00:00Z
    code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload
    cvelistv5