CVE-2026-14719
published 2026-07-05CVE-2026-14719: A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file…
PriorityP346high7.3CVSS 3.1
AVNACLPRNUINSUCLILAL
EPSS
0.29%
20.7th percentile
A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The attack can be executed remotely. The exploit has been published and may be used. The name of the affected product appears to have a typo in it.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sourcecodester | onlne_examination_learning_management_system | — | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
nvdv4.05.5MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0.
ghsa_unreviewed·2026-07-05
CVE-2026-14719 [MEDIUM] CWE-266 A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0.
A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The attack can be executed remotely. The exploit has been published and may be used. The name of the affected product appears to have a typo in it.
VulDB
SourceCodester Onlne Examination & Learning Management System 1.0 Registration Endpoint register.php role privileges management
vuldb·2026-07-04
CVE-2026-14719 [CRITICAL] SourceCodester Onlne Examination & Learning Management System 1.0 Registration Endpoint register.php role privileges management
A vulnerability classified as critical was found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management.
This vulnerability is handled as CVE-2026-14719. The attack can be executed remotely. Additionally, an exploit exists.
The name of the affected product appears to have a typo in it.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-05
Published