PT-2026-55781 · Sourcecodester · Class/Exam Timetabling System
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SourceCodester Class and Exam Timetabling System version 1.0
Description
An issue exists in the processing of the '/edit coursea.php' endpoint. Remote manipulation of the
ID variable allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution.Recommendations
Update SourceCodester Class and Exam Timetabling System version 1.0.
As a temporary workaround, restrict access to the '/edit coursea.php' endpoint to minimize the risk of exploitation.
Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Class/Exam Timetabling System