Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:onlne_examination_learning_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnlne Examination Learning Management System (e80fa385-fed0-5fa0-a30a-140ae8df4d29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14778 vulnerable 2026-07-29 00:26:17.547988 SourceCodester Onlne Examination & Learning Management System Enrollment Management ajax_enroll.php improper authorization
HIGH (7.3)
A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the component Enrollment Management. The manipulation of the argument student_id/schedule_id/action leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T23:30:09.071Z
Updated: 2026-07-06T13:15:27.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14777 vulnerable 2026-07-29 00:26:17.547868 SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted upload
MEDIUM (6.3)
A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T23:15:11.813Z
Updated: 2026-07-06T13:06:24.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14776 vulnerable 2026-07-29 00:26:17.547753 SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted upload
MEDIUM (6.3)
A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T23:00:11.544Z
Updated: 2026-07-06T16:49:27.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14775 vulnerable 2026-07-29 00:26:17.547526 SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted upload
MEDIUM (6.3)
A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T22:45:09.190Z
Updated: 2026-07-07T02:54:51.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14719 vulnerable 2026-07-29 00:26:17.494992 SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges management
HIGH (7.3)
A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The attack can be executed remotely. The exploit has been published and may be used. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T07:00:09.264Z
Updated: 2026-07-06T13:28:43.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11552 vulnerable 2026-07-29 00:23:31.408325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.