Fabian Scholars Tracking System vulnerabilities

6 CVEs affecting Fabian Scholars Tracking System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-70152, published 2026-02-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-70151, published 2026-02-18. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and…
CVE-2025-70152, published 2026-02-18. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints…
CVE-2024-24098, published 2024-03-05. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed.
CVE-2025-14951, published 2025-12-19. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument…
CVE-2025-14950, published 2025-12-19. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /delete_post.php. This manipulation of the argument ID causes sql…
CVE-2025-14940, published 2025-12-19. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/delete_user.php. This manipulation of the argument ID…