This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-14776 | BDVDB-2026-345685 Detail

SourceCodesterOnlne Examination & Learning Management System

Description#

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The name of the affected product appears to have a typo in it.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-434 Unrestricted Upload of File with Dangerous Type
  • CWE-284 Improper Access Control

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.