This vulnerability affects SourceCodester Online Examination & Learning Management System 1.0. The issue arises from improper handling of file uploads in upload_files.php, which allows attackers to upload arbitrary files remotely without restrictions. This could potentially lead to further exploitation depending on the uploaded file's nature and server configuration. The CVSS 4.0 base score is 5.3, indicating a medium severity level. No official patch or remediation guidance is currently available from the vendor or authoritative sources.

The unrestricted file upload vulnerability allows remote attackers to upload arbitrary files to the affected system. This could lead to unauthorized file execution, data compromise, or system manipulation depending on the environment and file types accepted. However, no known exploits are reported in the wild, and the overall impact is rated medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement strict file upload validation and filtering controls, restrict upload directories, and monitor for suspicious file uploads to mitigate potential exploitation.