PT-2026-76882 · Sourcecodester · Class/Exam Timetabling System
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SourceCodester Class and Exam Timetabling System version 1.0
Description
An issue exists in the
/edit subject2.php file that allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This is achieved by manipulating the ID argument.Recommendations
Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that contains a fix for this issue.
As a temporary workaround, restrict access to the
/edit subject2.php file to minimize the risk of exploitation.Exploit
Fix
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Class/Exam Timetabling System