Justconter

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** Remote SQL injection is possible through the manipulation of the `room name` variable within the `mysqli query()` function located in the `/admin/modal add room.php` file. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to interfere with the database. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the `/admin/modal add room.php` file or avoid using the `room name` parameter until a patch is applied.

🚨 CVE-2026-86209 A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /delete user.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. 🎖@cveNotify

🚨 CVE-2026-86210 A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete user account.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. 🎖@cveNotify

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** An issue exists in the `/admin/modal add course.php` file where the `mysqli query()` function does not properly handle the `course` variable. This allows a remote attacker to perform SQL injection, a technique used to manipulate database queries to gain unauthorized access or modify data. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that fixes this issue. As a temporary mitigation, restrict access to the `/admin/modal add course.php` file or avoid using the `course` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** An SQL injection flaw exists in the `mysqli query()` function within the `/admin/modal add course1.php` file. A remote attacker can trigger this issue by manipulating the `course` variable, allowing for unauthorized database queries. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0 to a patched version. As a temporary mitigation, restrict access to the `/admin/modal add course1.php` file or avoid using the `course` parameter until a fix is applied.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** An issue exists in the `/admin/modal add course2.php` file within the `mysqli query()` function. Remote manipulation of the `course` variable allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0 to a patched version. As a temporary mitigation, restrict access to the `/admin/modal add course2.php` file or avoid using the `course` variable until a fix is applied.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** An issue exists in the `/admin/modal add coursea.php` file within the `mysqli query()` function. A remote attacker can perform SQL injection by manipulating the `course` variable. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the `/admin/modal add coursea.php` file or avoid using the `course` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** An issue exists in the `mysqli query()` function within the `/admin/modal add product.php` file. A remote attacker can perform a SQL injection by manipulating the `fname` variable. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the `/admin/modal add product.php` file or avoid using the `fname` parameter until a patch is applied.

🚨 CVE-2026-86208 A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete teacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. 🎖@cveNotify

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** An authorization bypass exists in the `/admin/session.php` endpoint. A remote attacker can manipulate the `ID` argument to gain unauthorized access to the system. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0. As a temporary workaround, restrict access to the `/admin/session.php` file to minimize the risk of exploitation.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /edit rooma.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /edit room1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** A security flaw allows remote attackers to perform cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites. The issue exists in the '/forexam.php' endpoint due to improper handling of the `day` variable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `day` parameter in the '/forexam.php' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Class and Exam Timetabling System version 1.0 **Description** An issue exists in the `/schoolyr.php` endpoint where the manipulation of the `sy` variable allows for cross-site scripting (XSS), a technique used to inject malicious scripts into web pages viewed by other users. This attack can be initiated remotely. **Recommendations** Update SourceCodester Class and Exam Timetabling System version 1.0. As a temporary workaround, restrict access to the `/schoolyr.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Medicine Guide version 1.0 **Description** A critical vulnerability has been identified in code-projects Online Medicine Guide version 1.0. The vulnerability affects an unknown functionality of the `/cussignup.php` file. Manipulation of the `uname` argument results in a SQL injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be used. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Medicine Guide version 1.0 **Description** A critical vulnerability exists in code-projects Online Medicine Guide 1.0. The manipulation of the `phuname` argument in an unknown function of the `/pharsignup.php` file leads to a SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.