CVE-2026-13486: SourceCodester Class and Exam Timetabling System preview6.php sql injection

Published Jun 28, 2026

Updated

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument courseyearsection can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected Software

1 affected component

Sourcecodester Class and Exam Timetabling System=1.0/6.php

Event History

Jun 28, 2026

CVE Published

via MITRE·09:45 AM

Data Sourced

via MITRE·09:45 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-13486?

The severity of CVE-2026-13486 is rated as high with a score of 7.3.

What type of vulnerability is CVE-2026-13486?

CVE-2026-13486 is classified as an SQL Injection vulnerability.

How can CVE-2026-13486 be exploited?

CVE-2026-13486 can be exploited remotely by manipulating the 'course_year_section' argument in the 'preview6.php' file.

Which software is affected by CVE-2026-13486?

CVE-2026-13486 affects SourceCodester Class and Exam Timetabling System version 1.0.

What is the impact of CVE-2026-13486?

The impact of CVE-2026-13486 includes potential unauthorized access, data loss, or corruption through SQL injection.