Onlne Examination Learning Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:onlne_examination_learning_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Onlne Examination Learning Management System (e80fa385-fed0-5fa0-a30a-140ae8df4d29) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14778 |
vulnerable | 2026-07-29 00:26:17.547988 |
SourceCodester Onlne Examination & Learning Management System Enrollment Management ajax_enroll.php improper authorization
HIGH (7.3)
A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the component Enrollment Management. The manipulation of the argument student_id/schedule_id/action leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T23:30:09.071Z
Updated: 2026-07-06T13:15:27.861Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14777 |
vulnerable | 2026-07-29 00:26:17.547868 |
SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted upload
MEDIUM (6.3)
A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T23:15:11.813Z
Updated: 2026-07-06T13:06:24.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14776 |
vulnerable | 2026-07-29 00:26:17.547753 |
SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted upload
MEDIUM (6.3)
A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T23:00:11.544Z
Updated: 2026-07-06T16:49:27.412Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14775 |
vulnerable | 2026-07-29 00:26:17.547526 |
SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted upload
MEDIUM (6.3)
A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T22:45:09.190Z
Updated: 2026-07-07T02:54:51.798Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-14719 |
vulnerable | 2026-07-29 00:26:17.494992 |
SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges management
HIGH (7.3)
A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The attack can be executed remotely. The exploit has been published and may be used. The name of the affected product appears to have a typo in it.
Published: 2026-07-05T07:00:09.264Z
Updated: 2026-07-06T13:28:43.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11552 |
vulnerable | 2026-07-29 00:23:31.408325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.