CVE-2026-1423

6.3 MEDIUM

Published: January 26, 2026 Modified: January 28, 2026

Description

A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /admin_pic.php. Executing a manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://code-projects.org/

Source: cna@vuldb.com

Product

https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-3-remote-code-execution-via-unsafe-file-upload

Source: cna@vuldb.com

Exploit Third Party Advisory

https://vuldb.com/?ctiid.342839

Source: cna@vuldb.com

Permissions Required VDB Entry

https://vuldb.com/?id.342839

Source: cna@vuldb.com

Third Party Advisory VDB Entry

https://vuldb.com/?submit.736607

Source: cna@vuldb.com

Third Party Advisory VDB Entry

5 reference(s) from NVD

Quick Stats

CVSS v3 Score

6.3 / 10.0

EPSS (Exploit Probability)

0.0%

3th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-284 CWE-434

Affected Vendors

fabian

Related CVEs

CVE-2026-4572 6.3

CVE-2026-4571 6.3

CVE-2026-4570 6.3

CVE-2025-10736 6.5

CVE-2026-4569 6.3