Approved changes feed: RSS · Atom

cpe:2.3:a:janobe:e-learning_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorJanobe (958e97e2-37fb-58eb-baa2-792f3e424acf)
ProductE Learning System (f816f2df-2950-5bd2-82fa-e4d373c3a0b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1154 vulnerable 2026-06-03 15:14:43.850956 SourceCodester E-Learning System Lesson index.php cross site scripting
MEDIUM (4.3)
A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-01-19T12:32:06.674Z
Updated: 2026-02-23T08:45:51.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1590 vulnerable 2026-06-03 14:59:05.854715 SourceCodester E-Learning System List of Lessons Page index.php unrestricted upload
MEDIUM (4.7)
A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely.
Published: 2025-02-23T18:31:04.234Z
Updated: 2025-02-24T12:09:13.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1589 vulnerable 2026-06-03 14:59:05.854227 SourceCodester E-Learning System User Registration register.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely.
Published: 2025-02-23T18:00:09.904Z
Updated: 2025-02-24T12:10:18.189Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.