7.3HIGH

CVE-2025-10600 — A flaw has been found in SourceCodester Online Exam Form Submission 1.0.

Janobe · Online Exam Form Submission · Published 17 Sept 2025 · Modified 26 Sept 2026

Description

A flaw has been found in SourceCodester Online Exam Form Submission 1.0. This impacts an unknown function of the file /register.php. This manipulation of the argument img causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used.

References

https://github.com/qcycop0101-hash/CVE/issues/18
https://vuldb.com/?ctiid.324620
https://vuldb.com/?id.324620
https://vuldb.com/?submit.649541
https://www.sourcecodester.com/

What to do

Check whether Online Exam Form Submission is in your asset inventory.
Patch in the next maintenance window; prioritise internet-facing systems.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2025-10600