CVE-2026-86281

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public...

CVE-2026-86280

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

CVE-2026-86281 SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public...

CVE-2026-86281

SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 is affected by a cross-site request forgery (CSRF) vulnerability. The root cause, as indicated by the referenced report, is missing CSRF tokens . An unauthenticated remote attacker can initiate the attack with low comple...

EUVD-2026-72277

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public...

CVE-2026-86281 SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public...

CVE-2026-86279

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file authprocess.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotel...

CVE-2026-86277

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file deleteexam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The...

CVE-2026-86278

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file managesubjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed fr...

CVE-2026-86280 SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

EUVD-2026-72274

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

CVE-2026-86280 SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The...

CVE-2026-86280

SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 contains a cleartext storage vulnerability in the cict_portal.sql file, allowing remote, unauthenticated attackers to access sensitive information with low confidentiality impact. A proof-of-concept exploit is publicly a...

CVE-2026-86279 SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file authprocess.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotel...

CVE-2026-86279 SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file authprocess.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotel...

CVE-2026-86279

CVE-2026-86279 affects the SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 , a learning management platform. The vulnerability resides in an unknown function within the file auth_process.php (component: Login ) and results in session fixation , allowing a remote attac...

CVE-2026-86278 SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file managesubjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed fr...

CVE-2026-86278

A cross-site scripting (XSS) vulnerability exists in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 , affecting an unknown function in manage_subjects.php . Manipulation of the msg/title/content arguments results in XSS, exploitable remotely with user interaction req...

EUVD-2026-72272

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file managesubjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed fr...

CVE-2026-86278 SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file managesubjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed fr...