CVE-2026-14772

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0

Description An issue exists in the /edit course1.php file where the manipulation of the ID argument allows for SQL injection. This allows a remote attacker to interfere with the database queries. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to data.

Recommendations Update SourceCodester Class and Exametabling System version 1.0 to a patched version. As a temporary mitigation, restrict access to the /edit course1.php endpoint.