CVE-2026-14642

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0

Description Remote SQL injection is possible due to improper handling of the ID argument within the /edit class2.php endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

Recommendations Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that addresses this issue. As a temporary workaround, restrict access to the /edit class2.php file to minimize the risk of exploitation.