CVE-2026-108974 in E-Learning System
Prediction
by VulDB Data Team • 10/11/2026
A vulnerability was identified in <a href="/product/sourcecodester:e-learning_system">SourceCodester E-Learning System 1.0</a>. This affects the function <code>save_users</code> of the file <em>/classes/Users.php?f=save</em>. Such manipulation of the argument <em>img</em> leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.