CVE-2025-1590: Janobe E-Learning System

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely.

Affected products

• Janobe E-Learning System: version 1.0 only

Published 2025-02-23. Last modified 2026-06-17.