PT-2026-47244 · Sourcecodester · Class/Exam Timetabling System

Moist

·

CVE-2026-11482

·

Published

2026-06-08

·

Updated

2026-06-10

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0
Description An SQL injection issue exists that can be initiated remotely. The flaw is located in an unknown function within the '/archive5.php' endpoint, where manipulation of the sy argument allows for the execution of arbitrary SQL commands.
Recommendations Update SourceCodester Class and Exam Timetabling System version 1.0 to a patched version. As a temporary workaround, restrict access to the '/archive5.php' endpoint or avoid using the sy parameter until a fix is applied.

Exploit

Fix

SQL injection

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89CWE-74

Related Identifiers

CVE-2026-11482

Affected Products

Class/Exam Timetabling System