What is the CVSS score of CVE-2025-70151?

CVE-2025-70151 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of PHP are affected by CVE-2025-70151?

CVE-2025-70151 affects the Scholars Tracking System, allowing attackers to upload malicious files that could compromise system integrity and enable data breaches or lateral movement within the…

Is there a public PoC exploit available for CVE-2025-70151?

Yes, a public proof-of-concept exploit is available for CVE-2025-70151. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2025-70151?

Within 24 hours: Assess whether your organization uses Scholars Tracking System version 1.0 or earlier, and if so, restrict network access to this application. Within 7 days: Implement web application firewall (WAF) rules to block file uploads, disable the upload functionality if business-critical operations allow, and increase monitoring for suspicious file upload attempts. Within 30 days: Plan migration to a patched version once released, or replace the system with an alternative solution if vendor remediation timelines are uncertain.

PHP CVE-2025-70151

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-02-18 cve@mitre.org

PHP RCE File Upload Scholars Tracking System Fabian

8.8

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Feb 23, 2026 - 17:53 vuln.today

Public exploit code

CVE Published

Feb 18, 2026 - 18:24 nvd

HIGH 8.8

DescriptionCVE.org

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied filename without validating the file type or extension. By uploading a PHP file and then requesting it from /uploads/, an attacker can execute arbitrary PHP code as the web server user.

AnalysisAI

Scholars Tracking System versions up to 1.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-434: Unrestricted Upload of File with Dangerous Type) exists in the unrestricted file upload. The component. code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ directory using the original, user-supplied filename without validating the file type or extension. By uploading a PHP file and then requesting it from /uploads/, an attacker can execute arbitrary PHP code as the web server user.

RemediationAI

Monitor vendor advisories for a patch. Validate file types by content. Store uploads outside web root. Restrict network access to the affected service where possible.