CVE-2026-86277: SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file deleteexam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is remotely exploitable and requires no privileges or user interaction. An unauthenticated attacker able to reach the affected application could attempt to manipulate the ID argument handled by delete_exam.php.
What is the likely impact of successful exploitation?
The reported impact includes low confidentiality, integrity, and availability effects. The specific flaw is an authorization bypass involving an unknown function in delete_exam.php, but the available information does not identify the exact records or operations affected.
Is exploit code available?
Yes. The exploit has been publicly disclosed and may be used, which increases the likelihood of exploitation attempts against reachable instances.
Which version is known to be affected?
SourceCodester Syllabus-Aligned Learning Management & Examination System version 1.0 is identified as impacted. No fixed version or mitigation is provided in the available data.