PT-2026-53098 · Undefined · Undefined

Published 2026-06-28 · Updated 2026-06-28 · CVE-2026-13485

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a manipulation of the argument course year section results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-13485

Affected Products

Undefined

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-13485 · Security Note
• https://sourcecodester.com · Note
• https://github.com/lffaker/cybersec/issues/6 · Note
• https://vuldb.com/submit/838185 · Note
• https://vuldb.com/vuln/374482/cti · Note
• https://vuldb.com/cve/CVE-2026-13485 · Note
• https://vuldb.com/vuln/374482 · Note