CVE-2026-102913: SourceCodester Car Driving School Management System Master.php save_enrollment sql injection
A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=saveenrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over the network and requires no privileges or user interaction, according to the supplied CVSS vector. Public exploit code has been released.
What security impact could successful exploitation have?
The supplied CVSS vector indicates low confidentiality, integrity, and availability impact. The issue is classified as SQL injection, which affects an unknown function in the save_enrollment handler.
How can I identify potentially affected deployments?
Identify installations of SourceCodester Car Driving School Management System version 1.0 and check whether the /classes/Master.php?f=save_enrollment endpoint is exposed or reachable. The provided data does not include a patch, workaround, or detection method.