CVE-2025-10480

2.1 lowEPSS 0.3%

Low (2.1) in janobe online student file management system. EPSS 0.3% chance of exploitation in the next 30 days.

A weakness has been identified in SourceCodester Online Student File Management System 1.0. This affects an unknown function of the file /save_file.php. Executing manipulation can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWEs: CWE-434, CWE-284
Published: 2025-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

janobe:online_student_file_management_system

References

https://github.com/ganzhi-qcy/cve/issues/26
https://vuldb.com/?ctiid.323915
https://vuldb.com/?id.323915
https://vuldb.com/?submit.648541
https://www.sourcecodester.com/

Check your stack JSON