Ameenkbrd

**Name of the Vulnerable Software and Affected Versions** SourceCodester Syllabus-Aligned Learning Management and Examination System version 1.0 **Description** A security flaw in the `upload files.php` file allows for unrestricted file upload. This issue can be triggered remotely by manipulating a function within the specified file, potentially allowing an attacker to upload malicious files to the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Onlne Examination & Learning Management System version 1.0 **Description** An issue exists in the Registration Endpoint within the `register.php` file. A remote attacker can manipulate the `role` argument to cause improper privilege management. **Recommendations** Restrict access to the `role` argument in the `register.php` file to prevent unauthorized privilege escalation.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Customer Review App version 1.0 **Description** A denial of service can be triggered through the manipulation of the `name` and `comment` arguments. This issue affects the `add review()`, `save review()`, and `get all reviews()` functions within the `review app.py` file. The attack requires a local approach. **Recommendations** Update SourceCodester Customer Review App version 1.0 to a patched version. As a temporary workaround, restrict access to the `add review()`, `save review()`, and `get all reviews()` functions in the `review app.py` file.