PT-2026-55832 · Sourcecodester · Onlne Examination & Learning Management System

Fklov · Publicado 2026-07-05 · Atualizado 2026-07-05 · CVE-2026-14775

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process lesson.php. Such manipulation of the argument user id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.

Exploit

Correção

Unrestricted File Upload

Improper Access Control

Enumeração de Fraquezas

CWE-434

CWE-284

Identificadores relacionados

CVE-2026-14775

Produtos afetados

Onlne Examination & Learning Management System

Referências · 7

• 🔥 https://github.com/nuiifornet/A033/blob/main/OE-LMS-RCE-1-process_lesson.md · Exploit
• https://vuldb.com/vuln/376365/cti · Nota
• https://sourcecodester.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14775 · Nota de Segurança
• https://vuldb.com/submit/850677 · Nota
• https://vuldb.com/vuln/376365 · Nota
• https://vuldb.com/cve/CVE-2026-14775 · Nota