CVE-2026-86276
HighCVSS 7.3Summary
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing in the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely and the exploit has been published.
Risk Assessment
Risk of unauthorized access to the system's database using default credentials, potentially leading to full data compromise.
Recommendation
Change all default credentials to unique, strong passwords and update the system to a patched version or apply appropriate mitigations.
Other vulnerabilities in SourceCodester Syllabus-Aligned Learning Management & Examination System
See all- CVE-2026-86280Medium
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file cict_portal.sql. Manipulation leads to cleartext storage of sensitive information. The attack can be launched remotely and the exploit is publicly available.
- CVE-2026-86279Medium
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file auth_process.php in the Login component. This manipulation causes session fixation. The attack can be initiated remotely and the exploit is publicly disclosed.
- CVE-2026-86278Medium
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file manage_subjects.php. Manipulation of the arguments msg/title/content results in cross site scripting. The attack may be performed remotely and the exploit is public.
- CVE-2026-86277High
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. An unknown function in the file delete_exam.php is affected. Manipulation of the argument ID leads to authorization bypass. The attack can be carried out remotely and the exploit has been disclosed publicly.
- CVE-2026-86275Medium
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 affecting the register function of the file auth.php. Manipulation of the argument role results in improper privilege management. Remote exploitation is possible and the exploit is public.
Original NVD description (English source)
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published and may be used.