CVE Intelligence

Vulnerabilidades do SourceCodester Syllabus-Aligned Learning Management & Examination System

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam SourceCodester Syllabus-Aligned Learning Management & Examination System: 7 registro(s), com versões afetadas e correções.

CVE-2026-86281 Média · 4.3 CWE-352 07/09/2026
SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-86280 Média · 5.3 CWE-310 07/09/2026
SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVE-2026-86279 Média · 6.3 CWE-384 07/09/2026
SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-86278 Média · 4.3 CWE-79 07/09/2026
SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.
CVE-2026-86277 Alta · 7.3 CWE-285 07/09/2026
SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-86276 Alta · 7.3 CWE-259 07/09/2026
SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published and may be used.
CVE-2026-86275 Média · 5.3 CWE-266 07/09/2026
SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the attack is possible. The exploit is now public and may be used.