PT-2026-47248 · Sourcecodester · Class/Exam Timetabling System

Moist · Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-11486

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1.php. Performing a manipulation of the argument sy results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-11486

Affected Products

Class/Exam Timetabling System

References · 7

• 🔥 https://github.com/ssaaaa1234/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11486 · Security Note
• https://vuldb.com/cve/CVE-2026-11486 · Note
• https://vuldb.com/vuln/369106/cti · Note
• https://vuldb.com/vuln/369106 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/submit/834111 · Note