CVE-2026-5546: Campcodes Complete Online Learning Management System Crud_model.php add_lesson unrestricted upload

Published Apr 5, 2026

Updated

A flaw has been found in Campcodes Complete Online Learning Management System 1.0. This impacts the function add_lesson of the file /application/models/Crud_model.php. This manipulation causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Affected Software

1 affected component

Campcodes Campcodes Complete Online Learning Management System=1.0

Event History

Apr 5, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 AM

DescriptionSeverityWeakness

Feb 13, 58282

Event

via FIRST·07:58 PM

Frequently Asked Questions

What is the severity of CVE-2026-5546?

CVE-2026-5546 is classified as a high severity vulnerability due to its unrestricted file upload in the Campcodes LMS.

How do I fix CVE-2026-5546?

To fix CVE-2026-5546, implement input validation and restrict file uploads to only allow specific file types in the add_lesson function.

Which version of Campcodes Complete Online Learning Management System is affected by CVE-2026-5546?

CVE-2026-5546 affects version 1.0 of Campcodes Complete Online Learning Management System.

What kind of exploitation can occur due to CVE-2026-5546?

Exploitation of CVE-2026-5546 can allow attackers to upload malicious files, leading to remote code execution on the server.

What part of the Campcodes LMS is vulnerable in CVE-2026-5546?

CVE-2026-5546 targets the add_lesson function in the Crud_model.php file of Campcodes Complete Online Learning Management System.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.