Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-14775 1 Sourcecodester 2 Onlne Examination & Learning Management System, Onlne Examination Learning Management System 2026-07-07 6.3 Medium
A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.
CVE-2026-11552 1 Sourcecodester 3 Onlne Examination & Learning Management System, Onlne Examination Learning Management System, Syllabus-aligned Learning Management And Examination System 2026-06-09 5.3 Medium
A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file import_users.php. The manipulation of the argument raw_password with the input CICT_2026 leads to use of hard-coded password. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.