CVE-2026-11552 | SourceCodester Onlne Examination & Learning Management System 1.0 import_users.php raw_password hard-coded password

A vulnerability identified as critical has been detected in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file import_users.php. The manipulation of the argument raw_password with the input CICT_2026 leads to use of hard-coded password.

This vulnerability is documented as CVE-2026-11552. The attack can be initiated remotely. Additionally, an exploit exists.

This product is distributed under two entirely different names.