CVE-2026-11485

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0

Description An issue exists in the file '/archive2.php' where improper handling of the sy argument allows for SQL injection. This allows a remote attacker to manipulate database queries. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to view, modify, or delete data from the database.

Recommendations Update SourceCodester Class and Exam Timetabling System version 1.0 to a patched version. As a temporary workaround, restrict access to the '/archive2.php' file or avoid using the sy parameter until a fix is applied.