Sourcecodester · Class/Exam Timetabling System · CVE-2026-14732
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Class and Exam Timetabling System version 1.0
**Description**
An issue exists in the `/edit exam.php` file where improper handling of the `ID` argument allows for SQL injection. This flaw enables a remote attacker to manipulate database queries. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to data.
**Recommendations**
Update SourceCodester Class and Exam Timetabling System version 1.0. At the moment, there is no information about a newer version that contains a fix for this vulnerability.