Lucene search
+L

734 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/06 12:00 a.m.•2 views

CVE-2026-14777: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has...

6.5CVSS5.4AI score0.00366EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/05 11:30 p.m.•39 views

CVE-2026-14778

The CVE concerns SourceCodester Onlne Examination & Learning Management System 1.0. The vulnerability is in the Enrollment Management component, specifically the /ajax_enroll.php file, where manipulation of the arguments student_id, schedule_id, or action leads to improper authorization. This all...

7.5CVSS6.6AI score0.00495EPSS
SaveExploits0References6
NVD
NVD
•added 2026/07/05 11:16 p.m.•30 views

CVE-2026-14775

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /processlesson.php. Such manipulation of the argument userid leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

6.5CVSS0.00366EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/05 11:00 p.m.•58 views

CVE-2026-14776 SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted upload

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /uploadfiles.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote...

6.5CVSS0.00366EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/05 10:45 p.m.•51 views

CVE-2026-14775

The CVE concerns SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function in the file /process_lesson.php where manipulation of the argument user_id leads to unrestricted upload. The attack can be launched remotely, and an exploit is publicly available. T...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/05 10:45 p.m.•26 views

CVE-2026-14775

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /processlesson.php. Such manipulation of the argument userid leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/07/05 10:45 p.m.•55 views

CVE-2026-14775 SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted upload

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /processlesson.php. Such manipulation of the argument userid leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

6.5CVSS0.00366EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/05 7:00 a.m.•44 views

CVE-2026-14719

CVE-2026-14719 describes a privilege-management flaw in SourceCodester Onlne Examination & Learning Management System 1.0. The vulnerable component is the register.php file of the Registration Endpoint. An attacker can manipulate the role parameter to achieve improper privilege management, and th...

7.5CVSS6.7AI score0.00495EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/05 7:00 a.m.•17 views

CVE-2026-14719 SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges management

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The...

7.5CVSS6.7AI score0.00495EPSS
SaveExploits0References6
NVD
NVD
•added 2026/07/05 5:16 a.m.•24 views

CVE-2026-14698

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00366EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/05 3:00 a.m.•23 views

EUVD-2026-41723

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS5.6AI score0.00366EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/05 3:00 a.m.•45 views

CVE-2026-14698

CVE-2026-14698 affects SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0, with the vulnerability in file upload_files.php allowing unrestricted file upload after input manipulation. The CVSS metrics indicate a network-accessible, low-privilege, low-impact vulnerabilit...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•39 views

PT-2026-55833

Name of the Vulnerable Software and Affected Versions SourceCodester Onlne Examination & Learning Management System version 1.0 Description An unrestricted upload flaw exists within the Filename Extension component. The issue resides in the pathinfo function of the /upload files.php endpoint, whe...

6.5CVSS6.8AI score0.00366EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•2 views

CVE-2026-14719: Improper Privilege Management

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The...

7.5CVSS5.3AI score0.00495EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•1 views

CVE-2026-14776: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /uploadfiles.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote...

6.5CVSS5.3AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•2 views

CVE-2026-14775: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /processlesson.php. Such manipulation of the argument userid leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

6.5CVSS5.5AI score0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•28 views

PT-2026-55834

A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/02 12:16 p.m.•21 views

CVE-2026-27404

Unauthenticated Cross Site Scripting XSS in LMS = 9.7 versions...

7.1CVSS0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/02 11:14 a.m.•26 views

EUVD-2026-41329

Unauthenticated Cross Site Scripting XSS in LMS = 9.7 versions...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/02 11:14 a.m.•13 views

CVE-2026-27404

Unauthenticated Cross Site Scripting XSS in LMS = 9.7 versions...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rows per page
Query Builder