PT-2026-53196 · Undefined · Undefined

Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13526

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit class.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-13526

Affected Products

Undefined

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-13526 · Security Note
• https://vuldb.com/cve/CVE-2026-13526 · Note
• https://sourcecodester.com · Note
• https://github.com/yuanyuandechen/vul/issues/2 · Note
• https://vuldb.com/vuln/374534/cti · Note
• https://vuldb.com/submit/840550 · Note
• https://vuldb.com/vuln/374534 · Note