PT-2026-55725 · Sourcecodester · Class/Exam Timetabling System

Jingyuan Sun + 1 · Published 2026-07-04 · Updated 2026-07-04 · CVE-2026-14642

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0

Description Remote SQL injection is possible due to improper handling of the ID argument within the /edit class2.php endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database.

Recommendations Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that addresses this issue. As a temporary workaround, restrict access to the /edit class2.php file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-14642

Affected Products

Class/Exam Timetabling System

References · 9

• 🔥 https://github.com/sunjingyuan123/ccvvee/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14642 · Security Note
• https://vuldb.com/submit/846144 · Note
• https://twitter.com/infoflowcloud/status/2073509891285643275 · Twitter Post
• https://vuldb.com/vuln/376158/cti · Note
• https://vuldb.com/cve/CVE-2026-14642 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/376158 · Note
• https://twitter.com/CVEnew/status/2073509624477577276 · Twitter Post