CVE-2026-14641
SourceCodester Class and Exam Timetabling System edit_course.php sql injection
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_course.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
| CWE | CWE-89 CWE-74 |
| Vendor | sourcecodester |
| Product | class and exam timetabling system |
| Published | Jul 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for sourcecodester class and exam timetabling system
Be the first to know when new high vulnerabilities affecting sourcecodester class and exam timetabling system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
SourceCodester / Class and Exam Timetabling System
1.0
References
vuldb.com: https://vuldb.com/vuln/376157 vuldb.com: https://vuldb.com/vuln/376157/cti vuldb.com: https://vuldb.com/cve/CVE-2026-14641 vuldb.com: https://vuldb.com/submit/846143 vuldb.com: https://vuldb.com/submit/847955 github.com: https://github.com/sunjingyuan123/ccvvee/issues/2 sourcecodester.com: https://www.sourcecodester.com/
Credits
Jingyuan Sun (School of Cyberspace Security, Northwestern Polytechnical University) 🔍 sunjingyuan (VulDB User) sunjingyuan (VulDB User)