CVE-2026-13486 PUBLISHED

SourceCodester Class and Exam Timetabling System preview6.php sql injection

Assigner: VulDB
Reserved: 27.06.2026 Published: 28.06.2026 Updated: 28.06.2026

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument course_year_section can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 6.9

Product Status

Vendor SourceCodester
Product Class and Exam Timetabling System
Versions
  • Version 1.0 is affected
  • Version 6.php is affected

Credits

  • llfak (VulDB User) reporter

References

Problem Types

  • SQL Injection CWE
  • Injection CWE