CVE-2026-14775

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.

Score
CVSS 3.1 6.3 Medium
Status
Deferred - cna@vuldb.com
Published
2026-07-05
Last modified
2026-10-25
Weaknesses
CWE-284, CWE-434

Affected products

References