{"id":"CVE-2026-86276","title":"A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0","summary":"A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-259","CWE-798"],"vendor":"SourceCodester","product":"Syllabus-Aligned Learning Management & Examination System","affected":["syllabus-aligned_learning_management_examination_system 1.0"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:17:15.880","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86276","references":[{"url":"https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-03-SQL-Injection-Hardcoded-Credentials.md","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86276","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/904873","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399437","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399437/cti","label":"cna@vuldb.com"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-09T14:15:33.974401Z"},"epss":0.00288,"epssPercentile":0.21592,"ingestedAt":"2026-09-08T15:33:26.975Z","slug":"CVE-2026-86276","body":"## Overview\n\nA flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published and may be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":52,"depthScoreParts":{"impact":40.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202110,"id":"CVE-2026-86276","ts":1789400062823,"field":"exploit_available","old":"false","new":"true"},{"seq":200837,"id":"CVE-2026-86276","ts":1789397616798,"field":"exploit_available","old":"true","new":"false"},{"seq":199530,"id":"CVE-2026-86276","ts":1789395529350,"field":"exploit_available","old":"false","new":"true"},{"seq":198775,"id":"CVE-2026-86276","ts":1789392244561,"field":"exploit_available","old":"true","new":"false"},{"seq":197108,"id":"CVE-2026-86276","ts":1789384292776,"field":"exploit_available","old":"false","new":"true"},{"seq":194237,"id":"CVE-2026-86276","ts":1789378783447,"field":"exploit_available","old":"true","new":"false"},{"seq":193024,"id":"CVE-2026-86276","ts":1789376515487,"field":"exploit_available","old":"false","new":"true"},{"seq":191811,"id":"CVE-2026-86276","ts":1789373631481,"field":"exploit_available","old":"true","new":"false"},{"seq":190596,"id":"CVE-2026-86276","ts":1789369476243,"field":"exploit_available","old":"false","new":"true"},{"seq":189383,"id":"CVE-2026-86276","ts":1789368422061,"field":"exploit_available","old":"true","new":"false"},{"seq":188166,"id":"CVE-2026-86276","ts":1789365231172,"field":"exploit_available","old":"false","new":"true"},{"seq":186953,"id":"CVE-2026-86276","ts":1789363471648,"field":"exploit_available","old":"true","new":"false"},{"seq":185739,"id":"CVE-2026-86276","ts":1789361229531,"field":"exploit_available","old":"false","new":"true"},{"seq":184526,"id":"CVE-2026-86276","ts":1789358364167,"field":"exploit_available","old":"true","new":"false"},{"seq":182777,"id":"CVE-2026-86276","ts":1789354317598,"field":"exploit_available","old":"false","new":"true"},{"seq":181570,"id":"CVE-2026-86276","ts":1789353318101,"field":"exploit_available","old":"true","new":"false"},{"seq":180363,"id":"CVE-2026-86276","ts":1789350285141,"field":"exploit_available","old":"false","new":"true"},{"seq":179156,"id":"CVE-2026-86276","ts":1789348293317,"field":"exploit_available","old":"true","new":"false"},{"seq":177949,"id":"CVE-2026-86276","ts":1789346370424,"field":"exploit_available","old":"false","new":"true"},{"seq":176742,"id":"CVE-2026-86276","ts":1789343184892,"field":"exploit_available","old":"true","new":"false"},{"seq":174859,"id":"CVE-2026-86276","ts":1789334876095,"field":"exploit_available","old":"false","new":"true"},{"seq":173654,"id":"CVE-2026-86276","ts":1789333696921,"field":"exploit_available","old":"true","new":"false"},{"seq":172468,"id":"CVE-2026-86276","ts":1789331093463,"field":"exploit_available","old":"false","new":"true"},{"seq":171282,"id":"CVE-2026-86276","ts":1789328781262,"field":"exploit_available","old":"true","new":"false"},{"seq":170077,"id":"CVE-2026-86276","ts":1789327197567,"field":"exploit_available","old":"false","new":"true"},{"seq":168872,"id":"CVE-2026-86276","ts":1789323840515,"field":"exploit_available","old":"true","new":"false"},{"seq":167667,"id":"CVE-2026-86276","ts":1789319703046,"field":"exploit_available","old":"false","new":"true"},{"seq":166462,"id":"CVE-2026-86276","ts":1789318776524,"field":"exploit_available","old":"true","new":"false"},{"seq":165257,"id":"CVE-2026-86276","ts":1789315791139,"field":"exploit_available","old":"false","new":"true"},{"seq":164052,"id":"CVE-2026-86276","ts":1789313634649,"field":"exploit_available","old":"true","new":"false"},{"seq":162847,"id":"CVE-2026-86276","ts":1789311903867,"field":"exploit_available","old":"false","new":"true"},{"seq":161642,"id":"CVE-2026-86276","ts":1789308733579,"field":"exploit_available","old":"true","new":"false"},{"seq":159755,"id":"CVE-2026-86276","ts":1789300470943,"field":"exploit_available","old":"false","new":"true"},{"seq":156744,"id":"CVE-2026-86276","ts":1789294756078,"field":"exploit_available","old":"true","new":"false"},{"seq":155539,"id":"CVE-2026-86276","ts":1789292968341,"field":"exploit_available","old":"false","new":"true"},{"seq":154334,"id":"CVE-2026-86276","ts":1789289797967,"field":"exploit_available","old":"true","new":"false"},{"seq":151585,"id":"CVE-2026-86276","ts":1789277630251,"field":"exploit_available","old":"false","new":"true"},{"seq":150546,"id":"CVE-2026-86276","ts":1789276246270,"field":"exploit_available","old":"true","new":"false"},{"seq":149513,"id":"CVE-2026-86276","ts":1789273825115,"field":"exploit_available","old":"false","new":"true"},{"seq":148480,"id":"CVE-2026-86276","ts":1789271349118,"field":"exploit_available","old":"true","new":"false"},{"seq":146511,"id":"CVE-2026-86276","ts":1789269398434,"field":"exploit_available","old":"false","new":"true"},{"seq":145316,"id":"CVE-2026-86276","ts":1789266340633,"field":"exploit_available","old":"true","new":"false"},{"seq":144220,"id":"CVE-2026-86276","ts":1789262617131,"field":"exploit_available","old":"false","new":"true"},{"seq":143124,"id":"CVE-2026-86276","ts":1789261533820,"field":"exploit_available","old":"true","new":"false"},{"seq":141955,"id":"CVE-2026-86276","ts":1789258832248,"field":"exploit_available","old":"false","new":"true"},{"seq":140796,"id":"CVE-2026-86276","ts":1789256727518,"field":"exploit_available","old":"true","new":"false"},{"seq":139598,"id":"CVE-2026-86276","ts":1789254832462,"field":"exploit_available","old":"false","new":"true"},{"seq":138400,"id":"CVE-2026-86276","ts":1789251934594,"field":"exploit_available","old":"true","new":"false"},{"seq":137202,"id":"CVE-2026-86276","ts":1789247833185,"field":"exploit_available","old":"false","new":"true"},{"seq":136004,"id":"CVE-2026-86276","ts":1789247056439,"field":"exploit_available","old":"true","new":"false"}]}