Sourcecodester Onlne Examination Learning Management System vulnerabilities

CVE-2026-14778 [HIGH] CWE-266 CVE-2026-14778: A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the component Enrollment Management. The manipulation of the argument student_id/schedule_id/action leads to improper authorization. The attack is possible to be carried out remot

CVE-2026-14719 [HIGH] CWE-266 CVE-2026-14719: A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impa A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The attack can be executed remotely. The exploit has been publi

CVE-2026-14775 [MEDIUM] CWE-284 CVE-2026-14775: A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affecte

CVE-2026-14777 [MEDIUM] CWE-284 CVE-2026-14777: A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used fo

CVE-2026-14776 [MEDIUM] CWE-284 CVE-2026-14776: A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has b

CVE-2026-11552 [MEDIUM] CWE-255 CVE-2026-11552: A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file import_users.php. The manipulation of the argument raw_password with the input CICT_2026 leads to use of hard-coded passwo