PT-2026-27051 · Sourcecodester · Simple E-Learning System

563742137Abc · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4574

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4574

Affected Products

Simple E-Learning System

References · 6

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Simple-E-learning-System/SQLi-UserProfile-firstName.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4574 · Security Note
• https://vuldb.com/?ctiid.352411 · Note
• https://vuldb.com/?submit.775182 · Note
• https://vuldb.com/?id.352411 · Note
• https://sourcecodester.com · Note