[CVE-2026-86222] A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects…

Descripción técnica

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqli_query of the file /admin/modal_add_course2.php. Such manipulation of the argument course leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Puntuación CVSS

Score: 7.3/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Debilidades (CWE)

CWE-74, CWE-89

Fuente oficial

Publicado en NIST NVD.