CVE-2026-14776

Received Received - Intake

Unrestricted File Upload in Online Examination & Learning Management System

Publication date: 2026-07-05

Last updated on: 2026-07-05

Assigner: VulDB

Description

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The name of the affected product appears to have a typo in it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-05

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2026-07-06

EPSS Evaluated

N/A

NVD

CVE-2026-14776

Affected Vendors & Products

Vendor	Product	Version / Range
sourcecodester	online_examination_and_learning_management_system	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the SourceCodester Online Examination & Learning Management System 1.0, specifically in the pathinfo function of the /upload_files.php file related to filename extension handling.

The flaw allows an attacker to manipulate the file upload process, resulting in unrestricted file uploads.

This means an attacker can remotely upload potentially malicious files without proper restrictions.

Impact Analysis

The vulnerability can lead to unauthorized remote file uploads, which may allow attackers to execute malicious code on the affected system.

This can compromise the integrity, confidentiality, and availability of the system and its data.

Potential impacts include system takeover, data breaches, defacement, or further exploitation within the network.

Hi! I’m here to help you understand CVE-2026-14776. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70