Sourcecodester · Class/Exam Timetabling System · CVE-2026-78115
**Name of the Vulnerable Software and Affected Versions**
SourceCodester Class and Exam Timetabling System version 1.0
**Description**
An improper authorization issue exists within the User Account Update component in the file `/admin/edit user account.php`. A remote attacker can manipulate the `id`/`username` arguments to bypass authorization controls.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.