CVE-2025-1590: SourceCodester E-Learning System List of Lessons Page index.php unrestricted upload
A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1590?
CVE-2025-1590 has been classified as critical due to the potential for unrestricted file uploads.
How do I fix CVE-2025-1590?
To fix CVE-2025-1590, you should secure the file upload functionality by implementing file type restrictions and validating user inputs.
What component is affected by CVE-2025-1590?
CVE-2025-1590 affects the List of Lessons Page functionality in the SourceCodester E-Learning System.
What are the consequences of exploiting CVE-2025-1590?
Exploiting CVE-2025-1590 can lead to unauthorized file uploads and potentially allow attackers to execute malicious code.
Which version of SourceCodester E-Learning System is impacted by CVE-2025-1590?
CVE-2025-1590 impacts SourceCodester E-Learning System version 1.0.