CVE-2026-86279
MediumCVSS 6.3Summary
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file auth_process.php in the Login component. This manipulation causes session fixation. The attack can be initiated remotely and the exploit is publicly disclosed.
Risk Assessment
An attacker may hijack a user's session, potentially leading to unauthorized access to accounts and data in the system.
Recommendation
Implement mechanisms to prevent session fixation, such as regenerating the session ID after login. Apply vendor patches as well.
Other vulnerabilities in SourceCodester Syllabus-Aligned Learning Management & Examination System
See all- CVE-2026-86280Medium
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file cict_portal.sql. Manipulation leads to cleartext storage of sensitive information. The attack can be launched remotely and the exploit is publicly available.
- CVE-2026-86278Medium
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file manage_subjects.php. Manipulation of the arguments msg/title/content results in cross site scripting. The attack may be performed remotely and the exploit is public.
- CVE-2026-86277High
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. An unknown function in the file delete_exam.php is affected. Manipulation of the argument ID leads to authorization bypass. The attack can be carried out remotely and the exploit has been disclosed publicly.
- CVE-2026-86276High
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing in the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely and the exploit has been published.
- CVE-2026-86275Medium
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 affecting the register function of the file auth.php. Manipulation of the argument role results in improper privilege management. Remote exploitation is possible and the exploit is public.
Original NVD description (English source)
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.