CVE-2026-14770: SourceCodester Class and Exam Timetabling System edit_room.php sql injection
A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /editroom.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14770?
The severity of CVE-2026-14770 is rated high, with a score of 7.3.
How does CVE-2026-14770 allow SQL injection?
CVE-2026-14770 allows SQL injection through the manipulation of the argument ID in the edit_room.php file.
What are the potential impacts of CVE-2026-14770?
The potential impacts of CVE-2026-14770 include unauthorized access and manipulation of database information.
Can CVE-2026-14770 be exploited remotely?
Yes, CVE-2026-14770 can be exploited remotely, allowing attackers to execute SQL injection attacks.
What is the recommended mitigation for CVE-2026-14770?
The recommended mitigation for CVE-2026-14770 is to validate and sanitize all user inputs in the affected file to prevent SQL injection.