Scholars Tracking System vulnerabilities

2 known vulnerabilities in Scholars Tracking System from Fabian. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Scholars Tracking System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-70152Feb 18, 2026Fabian

  code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints lack authentication checks and directly concatenate user-supplie

• 8.8 High severity

  Scholars Tracking System: Unrestricted Upload of File with Dangerous Type

  CVE-2025-70151Feb 18, 2026Fabian

  code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ directo