CVE-2026-91005Medium· 6.3▾ SunlitA vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function move_uploaded_file of the file production/edit_picture.php of the component Profile Picture Upload. Performing a manipulation of t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
0.2% → 0.4%
A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function move_uploaded_file of the file production/edit_picture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116603Medium· 4.7SourceCodester Online Food Ordering System add_food.php unrestricted upload
CVE-2026-108975High· 7.3A security flaw has been discovered in SourceCodester Library Management System 1.0
CVE-2026-108974High· 7.3A vulnerability was identified in SourceCodester E-Learning System 1.0
CVE-2026-108973High· 7.3A vulnerability was determined in SourceCodester Contact Tracing System 1.0
CVE-2026-90857Medium· 6.3A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0
CVE-2025-11398Medium· 6.3A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0