CVE-2026-108974 | SourceCodester E-Learning System 1.0 Users.php?f=save save_users img unrestricted upload

October 11, 2026 Yanac

A vulnerability described as critical has been identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2026-108974. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More