CVE-2026-14775: SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted upload
A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /processlesson.php. Such manipulation of the argument userid leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14775?
The severity of CVE-2026-14775 is rated as medium with a score of 6.3.
How do I fix CVE-2026-14775?
To fix CVE-2026-14775, restrict file uploads by validating file types and implementing user permissions on the '/process_lesson.php' file.
What impact does CVE-2026-14775 have on the SourceCodester Online Examination & Learning Management System?
CVE-2026-14775 allows for unrestricted file uploads, which may lead to remote code execution and manipulation of the system.
Can CVE-2026-14775 be exploited remotely?
Yes, CVE-2026-14775 can be exploited remotely, making it critical for system administrators to address the vulnerability.
What kind of vulnerability is CVE-2026-14775 classified as?
CVE-2026-14775 is classified as a 'Malicious File Upload' vulnerability.