High severity · published Jul 5, 2026
CVE-2026-14719
SourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges management
7.3
CVSS
0.5%
EPSS
No
On KEV
Description
A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The attack can be executed remotely. The exploit has been published and may be used. The name of the affected product appears to have a typo in it.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OE
Onlne Examination & Learning Management System · SourceCodester
1.0 · source: vendor
Affected product
OE
Onlne Examination & Learning Management System
SourceCodester
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-14719
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-14719
pastebin.com
https://pastebin.com/Z4i5MGxk
vuldb.com
https://vuldb.com/cve/CVE-2026-14719
vuldb.com
https://vuldb.com/submit/847515
vuldb.com
https://vuldb.com/vuln/376307
vuldb.com
https://vuldb.com/vuln/376307/cti
www.sourcecodester.com
https://www.sourcecodester.com/
More from Onlne Examination & Learning Management System
7.3
CVE-2026-14778
SourceCodester Onlne Examination & Learning Management System Enrollment Management ajax_enroll.php improper authorization
6.3
CVE-2026-14777
SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted upload
6.3
CVE-2026-14776
SourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted upload
6.3
CVE-2026-14775
SourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted upload
5.3
CVE-2026-11552
SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password