CVE-2026-86279— SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
Quick assessment
Affected
SourceCodester Syllabus-Aligned Learning Management & Examination System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SourceCodester Syllabus-Aligned Learning Management & Examination System是SourceCodester社区的一套与教学大纲对齐的学习管理与考试系统。 SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0版本存在会话机制问题漏洞，该漏洞源于Login组件的auth_process.php文件中未知函数存在会话固定问题，可能允许攻击者远程发
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SourceCodester | Syllabus-Aligned Learning Management & Examination System | 1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86279
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
会话固定
Source: CVE Program / CVE List V5
Vulnerability Title
SourceCodester Syllabus-Aligned Learning Management & Examination System 会话机制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SourceCodester Syllabus-Aligned Learning Management & Examination System是SourceCodester社区的一套与教学大纲对齐的学习管理与考试系统。 SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0版本存在会话机制问题漏洞，该漏洞源于Login组件的auth_process.php文件中未知函数存在会话固定问题，可能允许攻击者远程发
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Syllabus-Aligned Learning Management & Examination System | 1.0 |
cpe:2.3:a:sourcecodester:syllabus-aligned_learning_management_examination_system:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-86279
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86279
请登录查看更多情报信息。
News Coverage for CVE-2026-86279 (1)
Other References for CVE-2026-86279 (4)
-
-
🔗 VulDB | Security Check third-party-advisory
-
Same Patch Batch · SourceCodester · 2026-09-07 · 12 CVEs total
| CVE-2026-86298 | 7.3 HIGH | SourceCodester Class and Exam Timetabling System delete_subject.php sql injection |
| CVE-2026-86292 | 7.3 HIGH | SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentica |
| CVE-2026-86290 | 7.3 HIGH | SourceCodester Online Voting System ajax.php save_category sql injection |
| CVE-2026-86277 | 7.3 HIGH | SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php a |
| CVE-2026-86276 | 7.3 HIGH | SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded |
| CVE-2026-86293 | 6.5 MEDIUM | SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing aut |
| CVE-2026-86280 | 5.3 MEDIUM | SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql c |
| CVE-2026-86275 | 5.3 MEDIUM | SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register |
| CVE-2026-86294 | 4.3 MEDIUM | SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cr |
| CVE-2026-86281 | 4.3 MEDIUM | SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site reques |
| CVE-2026-86278 | 4.3 MEDIUM | SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.p |
IV. Related Vulnerabilities
-
CVE-2026-86281
SourceCodester Syllabus-Aligned Learning Management & Examin -
CVE-2026-86280
SourceCodester Syllabus-Aligned Learning Management & Examin -
CVE-2026-86278
SourceCodester Syllabus-Aligned Learning Management & Examin -
CVE-2026-86277
SourceCodester Syllabus-Aligned Learning Management & Examin -
CVE-2026-86276
SourceCodester Syllabus-Aligned Learning Management & Examin
Same vendor: SourceCodester
-
CVE-2026-114267
SourceCodester Food Order Management System Admin Endpoint a -
CVE-2026-112097
SourceCodester Inventory System Sales Management transaction -
CVE-2026-112096
SourceCodester Inventory System Purchase Records transaction -
CVE-2026-112095
SourceCodester Inventory System Product Management products_ -
CVE-2026-109620
SourceCodester Online Reviewer System index.php prepare sql
Same weakness: CWE-384
-
CVE-2026-107421
WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hij -
CVE-2026-93909
IBM WebSphere Application Server Liberty is affected by an a -
CVE-2026-63161
Omnispace Agora Project < 26.10.0 Session Fixation via Authe -
CVE-2026-107226
AsyncHttpClient: Cookies received over plaintext HTTP can pl -
CVE-2026-107229
AsyncHttpClient: Incomplete origin checks in the default coo
V. Comments for CVE-2026-86279
No comments yet