CVE-2026-13488: SourceCodester Class and Exam Timetabling System preview7.php sql injection
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown functionality of the file /preview7.php. The manipulation of the argument courseyearsection results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13488?
CVE-2026-13488 has a medium severity score of 5.5.
How does CVE-2026-13488 affect the SourceCodester Class and Exam Timetabling System?
CVE-2026-13488 allows for SQL injection through the manipulation of the argument course_year_section in the /preview7.php file.
Can CVE-2026-13488 be exploited remotely?
Yes, CVE-2026-13488 can be exploited remotely.
What is the potential impact of CVE-2026-13488?
The potential impact of CVE-2026-13488 includes unauthorized access to the database and manipulation of data.
How can I mitigate the risk of CVE-2026-13488?
To mitigate CVE-2026-13488, it is recommended to sanitize user inputs and apply parameterized queries to prevent SQL injection.