CVE-2026-108974: SourceCodester E-Learning System Users.php save_users unrestricted upload
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attack can be launched remotely with no stated authentication or user-interaction requirement. Exploitation targets the img argument handled by the save_users function at /classes/Users.php?f=save.
Is public exploit code available?
Yes. The available data states that an exploit is publicly available and may be used.
Which deployments are known to be affected?
The affected product and version identified are SourceCodester E-Learning System 1.0. The provided data does not establish whether other versions or configurations are affected.