https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10425.htmlhttps://patchthecve.com/cve/CVE-2025-10425.htmlWed, 17 Jun 2026 08:28:18 +0000HIGH 7.3: A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation of the argument new_image leads to unrestricted upload. The attack mahttps://patchthecve.com/cve/CVE-2025-10424.htmlhttps://patchthecve.com/cve/CVE-2025-10424.htmlWed, 17 Jun 2026 08:28:18 +0000HIGH 7.3: A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation of the argument new_image causes unrestricted upload. The attack is phttps://patchthecve.com/cve/CVE-2025-9444.htmlhttps://patchthecve.com/cve/CVE-2025-9444.htmlWed, 17 Jun 2026 10:09:00 +0000HIGH 7.3: A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue affects some unknown processing of the file /admin/controller/delete_group_student.php. The manipulation of the argument batch_id leads to sql injection. The attack can be initiated https://patchthecve.com/cve/CVE-2025-9440.htmlhttps://patchthecve.com/cve/CVE-2025-9440.htmlWed, 17 Jun 2026 10:09:00 +0000MEDIUM 4.3: A security vulnerability has been detected in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this issue is some unknown functionality of the file /admin/add_title.php. Such manipulation of the argument Title leads to cross site scripting. The attack may be perfohttps://patchthecve.com/cve/CVE-2025-9439.htmlhttps://patchthecve.com/cve/CVE-2025-9439.htmlWed, 17 Jun 2026 10:09:00 +0000MEDIUM 4.3: A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this vulnerability is an unknown functionality of the file /rse/admin/edit_faculty.php?id=2. This manipulation of the argument Name causes cross site scripting. The attack is possibhttps://patchthecve.com/cve/CVE-2025-9438.htmlhttps://patchthecve.com/cve/CVE-2025-9438.htmlWed, 17 Jun 2026 10:09:00 +0000MEDIUM 4.3: A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected is an unknown function of the file /admin/add_student.php. The manipulation of the argument address results in cross site scripting. The attack can be executed remotely. The explohttps://patchthecve.com/cve/CVE-2025-9434.htmlhttps://patchthecve.com/cve/CVE-2025-9434.htmlWed, 17 Jun 2026 10:08:58 +0000MEDIUM 4.3: A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0. This affects an unknown function of the file /admin/edit_title.php?id=1. Executing manipulation of the argument desc can lead to cross site scripting. The attack may be launched remotely. The e