PT-2026-61075 · Sourcecodester · Class/Exam Timetabling System

Hackone · CVE-2026-16227 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0

Description Remote SQL injection is possible via the manipulation of the ID argument in the '/edit subject.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to interfere with the database.

Recommendations Update SourceCodester Class and Exam Timetabling System version 1.0 to a version that contains a fix for this issue. As a temporary workaround, restrict access to the '/edit subject.php' endpoint to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-16227

Affected Products

Class/Exam Timetabling System

References · 8

• 🔥 https://github.com/fichterclapsaddle879-rgb/MyCve/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16227 · Security Note
• https://twitter.com/VulmonFeeds/status/2078804945478848962 · Twitter Post
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/380049 · Note
• https://vuldb.com/vuln/380049/cti · Note
• https://vuldb.com/cve/CVE-2026-16227 · Note
• https://vuldb.com/submit/858246 · Note