SourceCodester Class and Exam Timetabling System vulnerabilities
44 known CVE vulnerabilities in SourceCodester Class and Exam Timetabling System, translated and rated.
- CVE-2026-13565High
In SourceCodester Class and Exam Timetabling System 1.0, the file /edit_class1.php is vulnerable to SQL injection via the ID argument. The attack can be performed remotely, and the exploit has been publicly disclosed.
- CVE-2026-78115Medium
A vulnerability in SourceCodester Class and Exam Timetabling System 1.0 in the file /admin/edit_user_account.php (User Account Update component) allows manipulation of the id/username argument, leading to improper authorization. The attack may be launched remotely.
- CVE-2026-75080High
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0, affecting the file /edit_subject1.php. Manipulation of the argument ID leads to SQL injection. The attack can be carried out remotely and the exploit has been disclosed publicly.
- CVE-2026-75079High
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0, affecting the file /edit_subject2.php. Manipulation of the argument ID leads to SQL injection. The attack can be executed remotely and the exploit has been made public.
- CVE-2026-75078Medium
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. It affects an unknown part of the file /BSHRM1.php. Manipulation of the argument course results in cross site scripting. Remote exploitation is possible, and the exploit is publicly available.
- CVE-2026-75077Medium
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. It affects some unknown functionality of the file /BSCE2.php. Manipulation of the argument course leads to cross site scripting. The attack may be launched remotely, and the exploit is publicly available.
- CVE-2026-19899High
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0, where SQL injection in /edit_teacher.php via the ID argument can lead to SQL injection. The attack can be performed remotely, and the exploit is publicly disclosed.
- CVE-2026-16486Medium
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /BSIS.php. Manipulation of the day argument results in cross-site scripting. The attack can be initiated remotely, and the exploit has been made public.
- CVE-2026-16485Medium
In SourceCodester Class and Exam Timetabling System 1.0, an unknown functionality in /class.php is vulnerable to cross-site scripting (XSS) via the day argument. Remote exploitation is possible and the exploit is public.
- CVE-2026-16484High
SourceCodester Class and Exam Timetabling System 1.0 is vulnerable to SQL Injection in the file /edit_subjecta.php via manipulation of the ID argument. The attack can be performed remotely.
- CVE-2026-16228High
A SQL Injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /edit_schoolyr.php. Manipulating the ID argument allows remote SQL injection. The exploit is publicly available.
- CVE-2026-16227High
SourceCodester Class and Exam Timetabling System 1.0 is vulnerable to SQL Injection in the file /edit_subject.php via manipulation of the ID argument. The attack can be performed remotely.
- CVE-2026-16203Low
A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /forCYS.php file. Manipulation of the course argument allows remote injection of malicious scripts. The exploit is publicly available.
- CVE-2026-16202Low
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0, allowing XSS in /CYS.php via the course argument. The attack is remotely exploitable and the exploit is public.
- CVE-2026-16156Low
A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /forexam.php. Manipulating the day argument allows remote script execution. The exploit has been publicly disclosed.
- CVE-2026-16155Low
A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /schoolyr.php. Manipulating the sy argument allows remote script execution. The exploit has been publicly disclosed.
- CVE-2026-16154High
In SourceCodester Class and Exam Timetabling System 1.0, a SQL injection vulnerability exists in the file /edit_room1.php. An attacker can remotely manipulate the ID argument, leading to unauthorized database access. The exploit has been publicly disclosed.
- CVE-2026-16152High
SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_rooma.php file. An attacker can manipulate the ID argument to execute remote SQL queries.
- CVE-2026-15715Medium
A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /exam.php file. Manipulation of the 'day' argument allows remote injection of malicious scripts. The exploit is publicly available.
- CVE-2026-15597High
A SQL injection vulnerability has been discovered in SourceCodester Class and Exam Timetabling System 1.0 in the file /edit_exam2.php. An attacker can remotely manipulate the ID argument, leading to unauthorized database access. The exploit has been publicly released, increasing the risk of attacks.
- CVE-2026-15596Medium
A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /subject.php file. An unknown function allows manipulation of the subject argument, enabling script injection. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-15595Medium
A cross-site scripting vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /forsubject.php. An unknown function mishandles the subject argument, allowing injection of malicious scripts. The attack can be performed remotely and the exploit has been publicly disclosed.
- CVE-2026-14772High
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0/1.php in the file /edit_course1.php. An unknown function allows manipulation of the ID argument, leading to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.
- CVE-2026-14771High
A SQL injection vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0 in the file /edit_exam1.php. An unknown function improperly handles the ID argument, allowing remote attackers to execute arbitrary SQL queries. The exploit has been published and may be used.
- CVE-2026-14770High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_room.php file. An attacker can remotely manipulate the ID argument, leading to SQL injection. The exploit is publicly available.
- CVE-2026-14734High
A SQL injection vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_product.php file via the ID argument. The attack can be performed remotely and the exploit has been published.
- CVE-2026-14733High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /edit_coursea.php. An attacker can remotely manipulate the ID argument, leading to SQL injection. The exploit is publicly available.
- CVE-2026-14732High
A SQL injection vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. The issue is in the /edit_exam.php file, where the ID argument is vulnerable to manipulation. The attack can be performed remotely, and the exploit has been publicly disclosed.
- CVE-2026-14642High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_class2.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.
- CVE-2026-14641High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_course.php file. An attacker can remotely manipulate the ID argument, leading to unauthorized database access. The exploit has been publicly disclosed and may be used.
- CVE-2026-13566High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /preview3.php file. An attacker can remotely manipulate the course_year_section argument, leading to SQL injection. The exploit is publicly available.
- CVE-2026-13527High
A SQL injection vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0 in the file /preview4.php. An unknown function improperly handles the course_year_section argument, allowing an attacker to inject SQL code. The attack can be launched remotely and exploit details have been publicly disclosed.
- CVE-2026-13526High
A SQL injection vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_class.php file via the ID parameter. The attack can be performed remotely and the exploit has been published.
- CVE-2026-13521High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0/5.php in the file /preview5.php. An attacker can remotely manipulate the course_year_section argument, leading to SQL injection. The exploit is publicly available.
- CVE-2026-13488High
A SQL injection vulnerability has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php in the file /preview7.php. Manipulation of the course_year_section argument allows remote exploitation. The exploit has been publicly released and may be used in attacks.
- CVE-2026-13487High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /archive.php file via the sy argument. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-13486High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /preview6.php file. Manipulation of the course_year_section argument allows remote attack. The exploit has been publicly disclosed.
- CVE-2026-13485High
A SQL injection vulnerability was discovered in SourceCodester Class and Exam Timetabling System 1.0 in the /preview.php file. An attacker can remotely manipulate the course_year_section argument, leading to SQL injection. The exploit has been made public, increasing the risk of exploitation.
- CVE-2026-11486High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /archive1.php via manipulation of the sy argument. The attack can be performed remotely and the exploit is public.
- CVE-2026-11485High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /archive2.php via the sy parameter. The attack can be performed remotely and the exploit has been published.
- CVE-2026-11484High
A SQL injection vulnerability has been identified in SourceCodester Class and Exam Timetabling System 1.0 in the file /archive3.php via the sy parameter. The attack can be performed remotely and the exploit is publicly available.
- CVE-2026-11483High
A security flaw was discovered in SourceCodester Class and Exam Timetabling System 1.0 in the file /archive4.php, where manipulation of the sy parameter leads to SQL injection. The attack can be performed remotely and the exploit has been made public.
- CVE-2026-11472High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /index1.php via the Password argument. The attack can be performed remotely and the exploit has been publicly disclosed.
- CVE-2026-11471High
A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the file /index2.php via the Password argument. The attack can be performed remotely and the exploit has been publicly disclosed.

