CVE-2025-70151

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied filename without validating the file type or extension. By uploading a PHP file and then requesting it from /uploads/, an attacker can execute arbitrary PHP code as the web server user.

• CWE-434

• https://code-projects.org/scholars-tracking-system-in-php-with-source-code/Product
• https://youngkevinn.github.io/posts/CVE-2025-70151-Scholars-FileUpload-RCE/Exploit, Mitigation, Third Party Advisory

Published

Feb 18, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-70146Missing authentication in multiple administrative action scr…9.1
• CVE-2025-70147Missing authentication in /admin/student.php and /admin/teac…7.5
• CVE-2025-70148Missing authentication and authorization in print_membership…7.5
• CVE-2025-70149CodeAstro Membership Management System 1.0 is vulnerable to …9.8
• CVE-2025-7015Session Fixation vulnerability in Akın Software Computer Imp…9.8
• CVE-2025-70150CodeAstro Membership Management System 1.0 contains a missin…9.8
• CVE-2025-70152code-projects Community Project Scholars Tracking System 1.0…9.8
• CVE-2025-7016Improper Access Control vulnerability in Akın Software Compu…9.8
• CVE-2025-70161EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection.…9.8
• CVE-2025-7017Heap buffer out-of-bounds read vulnerability in Avira Antivi…7.8
• CVE-2025-7018Null pointer dereference vulnerability in Avira Antivirus en…5.5
• CVE-2025-7019Stack overflow vulnerability in Avast Antivirus when scannin…5.5