CVE-2026-108975

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

CVE-2026-108975

The SourceCodester Library Management System 1.0 contains a security flaw in the admin/add_admin.php file, specifically affecting the move_uploaded_file function. By manipulating the image argument, an attacker can achieve unrestricted upload of files. This vulnerability can be initiated remotely...

CVE-2026-108975 SourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

EUVD-2026-98315

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

CVE-2026-108975 SourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...

EUVD-2026-98314

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-108974

The SourceCodester E-Learning System 1.0 is vulnerable to an unrestricted upload of files due to a flaw in the save_users function located in /classes/Users.php?f=save. By manipulating the img argument, a remote attacker can upload files without proper restrictions. The documents indicate that an...

CVE-2026-108974 SourceCodester E-Learning System Users.php save_users unrestricted upload

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-108974 SourceCodester E-Learning System Users.php save_users unrestricted upload

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-108972

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

CVE-2026-108970

A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the file include/database.php of the component Registration Form. Performing a manipulation of the argument branch results in s...

CVE-2026-108969

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

CVE-2026-108973

The SourceCodester Contact Tracing System 1.0 is vulnerable to an unrestricted file upload via the move_uploaded_file function in the /classes/Users.php?f=save file. By manipulating the img/id argument, an attacker can perform a remote upload. Exploitation details have been publicly disclosed and...

EUVD-2026-98313

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

EUVD-2026-98301

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

CVE-2026-108972 SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

CVE-2026-108972 SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

CVE-2026-108972

A vulnerability exists in the SourceCodester Human Resource Management System 1.0 within the Employee Endpoint component. Specifically, the session_start function in the file controller/employee.php is susceptible to improper authentication when an attacker manipulates the role/pfimg/EmpId argume...