Adnan

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Examination & Learning Management System version 1.0 **Description** An issue exists in the processing of the 'upload files.php' endpoint, which allows for unrestricted file upload. This flaw can be exploited remotely to upload arbitrary files to the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Examination & Learning Management System version 1.0 **Description** An authorization bypass exists in the `view students.php` file. A remote attacker can exploit this by manipulating the `class group` argument, allowing unauthorized access to restricted functionality. **Recommendations** Restrict access to the `view students.php` file or avoid using the `class group` argument until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.