CVE-2026-14641: SourceCodester Class and Exam Timetabling System edit_course.php sql injection
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /editcourse.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2026-14641?
CVE-2026-14641 is a high severity SQL injection vulnerability affecting the SourceCodester Class and Exam Timetabling System's edit_course.php file.
What is the severity of CVE-2026-14641?
The severity of CVE-2026-14641 is rated as high, with a score of 7.3.
How do I fix CVE-2026-14641?
To fix CVE-2026-14641, ensure proper input validation and sanitization in the edit_course.php file to prevent SQL injection.
Can CVE-2026-14641 be exploited remotely?
Yes, CVE-2026-14641 can be exploited remotely by manipulating the argument ID.
What software is affected by CVE-2026-14641?
The affected software for CVE-2026-14641 is the SourceCodester Class and Exam Timetabling System version 1.0.