Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:e-learning_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductE Learning System (9262cf76-1857-51b8-afae-ffeb62f0261c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1154 vulnerable 2026-06-08 07:47:14.396165 SourceCodester E-Learning System Lesson index.php cross site scripting
MEDIUM (4.3)
A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-01-19T12:32:06.674Z
Updated: 2026-02-23T08:45:51.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1590 vulnerable 2026-06-08 07:08:37.356988 SourceCodester E-Learning System List of Lessons Page index.php unrestricted upload
MEDIUM (4.7)
A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely.
Published: 2025-02-23T18:31:04.234Z
Updated: 2025-02-24T12:09:13.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1589 vulnerable 2026-06-08 07:08:37.355040 SourceCodester E-Learning System User Registration register.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely.
Published: 2025-02-23T18:00:09.904Z
Updated: 2025-02-24T12:10:18.189Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.