Back to overview

CVE-2026-14777

MEDIUM Exploitation: PoC
6.3
CVSS 3.1
Description
A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The name of the affected product appears to have a typo in it.

Metadata

CVE ID
CVE-2026-14777
State
PUBLISHED
Assigner
VulDB
Reserved
2026-07-05 04:08 UTC
Published
2026-07-05 23:15 UTC
Last updated
2026-07-06 13:06 UTC
Primary CWE
CWE-434
Unrestricted Upload
Vendor / Product
SourceCodester / Onlne Examination & Learning Management System
Sources
cve.org  ·  NVD

Severity & Metrics

6.3 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
SSVC — CISA Coordinator
Exploitation
PoC
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
SourceCodester Onlne Examination & Learning Management System — 1.0
Weakness (CWE)
CWESourceDescription
CWE-284 cna Improper Access Controls
CWE-434 cna Unrestricted Upload
CVSS scores (4)
ScoreSeverityVersionSourceVector
6.5 N/D 2.0 cna AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
6.3 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
6.3 MEDIUM 3.0 cna CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
5.3 MEDIUM 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
References (6)
Back to overview