CVE-2026-108974

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-108974 SourceCodester E-Learning System Users.php save_users unrestricted upload

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...

EUVD-2026-98314

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-108974

The SourceCodester E-Learning System 1.0 is vulnerable to an unrestricted upload of files due to a flaw in the save_users function located in /classes/Users.php?f=save. By manipulating the img argument, a remote attacker can upload files without proper restrictions. The documents indicate that an...

PT-2026-111293

Name of the Vulnerable Software and Affected Versions SourceCodester E-Learning System version 1.0 Description An unrestricted file upload issue exists in the save users function within the /classes/Users.php?f=save endpoint. A remote attacker can exploit this by manipulating the img argument to...

CVE-2026-108974: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-1154: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be...

EUVD-2025-4407

Malicious code in bioql PyPI...

EUVD-2022-34911

Malicious code in bioql PyPI...

EUVD-2022-34946

Malicious code in bioql PyPI...

EUVD-2022-34949

Malicious code in bioql PyPI...

EUVD-2025-4404

Malicious code in bioql PyPI...

CVE-2025-1589

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1590 SourceCodester E-Learning System List of Lessons Page index.php unrestricted upload

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

CVE-2025-1589

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1589 SourceCodester E-Learning System User Registration register.php cross site scripting

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1589

CVE-2025-1589 affects SourceCodester E-Learning System 1.0, specifically the User Registration Handler’s /register.php. Multiple connected sources describe a cross-site scripting vulnerability that can be triggered remotely through the registration path. The exact affected code path is the handli...

CVE-2025-1589: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1590: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

SourceCodester E-Learning System Code Issues and Vulnerabilities

SourceCodester E-Learning System is a SourceCodester open source e-learning system. A code issue vulnerability exists in SourceCodester E-Learning System version 1.0, which stems from allowing unlimited file uploads...