A vulnerability identified as critical has been detected in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation of the argument new_image causes unrestricted upload.
This vulnerability is tracked as CVE-2025-10424. The attack is possible to be carried out remotely. Moreover, an exploit is present.
