PT-2026-55832 · Sourcecodester · Onlne Examination & Learning Management System

Fklov · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14775

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process lesson.php. Such manipulation of the argument user id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-14775

Affected Products

Onlne Examination & Learning Management System

References · 7

• 🔥 https://github.com/nuiifornet/A033/blob/main/OE-LMS-RCE-1-process_lesson.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14775 · Security Note
• https://vuldb.com/vuln/376365/cti · Note
• https://sourcecodester.com · Note
• https://vuldb.com/submit/850677 · Note
• https://vuldb.com/vuln/376365 · Note
• https://vuldb.com/cve/CVE-2026-14775 · Note