CVE-2026-19899
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0, where SQL injection in /edit_teacher.php via the ID argument can lead to SQL injection. The attack can be performed remotely, and the exploit is publicly disclosed.
Risk Assessment
The risk includes potential unauthorized access to the database, leading to data leakage, modification, or deletion.
Recommendation
It is recommended to update the system to a patched version or apply input filters to prevent SQL injection.
Original NVD description (English source)
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /edit_teacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.