CVE-2026-14772
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0/1.php in the file /edit_course1.php. An unknown function allows manipulation of the ID argument, leading to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.
Risk Assessment
The risk involves the possibility of remote unauthorized SQL queries, which could lead to data leakage, modification, or deletion in the system database. The organization faces a breach of data confidentiality and integrity.
Recommendation
Immediately update the system to the latest version or apply a security patch. Until then, restrict access to /edit_course1.php and validate all input data.
Original NVD description (English source)
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The impacted element is an unknown function of the file /edit_course1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.