CVE-2026-14777
SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted upload
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jul 5, 2026
- Updated
- Jul 6, 2026
- Reserved
- Jul 5, 2026
Description
A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The name of the affected product appears to have a typo in it.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Onlne Examination & Learning Management SystemSourceCodester |
|
References
- VDB-376367 | SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted uploadvdb-entry
- VDB-376367 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-14777 | CVE Analysis and Reportthird-party-advisory
- Submit #850679 | SourceCodester Online Examination & Learning Management System 1.0 Unrestricted Uploadthird-party-advisory
- https://github.com/nuiifornet/A033/blob/main/OE-LMS-RCE-3-announcements.mdexploit
- https://www.sourcecodester.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.