CVE-2022-43319: Simple E-Learning System Project Simple E-Learning System

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learning System v1.0 allows attackers to read arbitrary files.

Affected products

• Simple E-Learning System Project Simple E-Learning System: version 1.0 only

Published 2022-11-07. Last modified 2026-06-17.