| Title | SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 Unrestricted File Upload |
|---|
| Description | A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. It has been declared as critical. This vulnerability affects an unknown functionality of the files `upload_files.php`, `announcements.php`, and `process_lesson.php`. The manipulation of the file upload parameter with an unknown input leads to unrestricted file upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. |
|---|
| Source | ⚠️ https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-02-Unrestricted-File-Upload-RCE.md |
|---|
| User | BI1IHA (UID 69245) |
|---|
| Submission | 07/25/2026 05:58 (1 month ago) |
|---|
| Moderation | 09/06/2026 15:12 (1 month later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 376294 [SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload] |
|---|
| Points | 0 |
|---|