CVE-2026-15597: SourceCodester Class and Exam Timetabling System edit_exam2.php sql injection
Published Jul 13, 2026
·Updated
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. This affects an unknown function of the file /editexam2.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
1 affected component
Sourcecodester Class and Exam Timetabling System=1.0/2.php
Event History
Jul 13, 2026
CVE Published
via MITRE·09:45 PM
Data Sourced
via MITRE·09:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-15597?
CVE-2026-15597 has a severity rating of high, with a score of 7.3.
2
What type of vulnerability is CVE-2026-15597?
CVE-2026-15597 is classified as an SQL Injection vulnerability.
3
How can I fix CVE-2026-15597?
To fix CVE-2026-15597, validate and sanitize all user inputs that are used in SQL queries.
4
Can CVE-2026-15597 be exploited remotely?
Yes, CVE-2026-15597 can be exploited remotely by manipulating the argument ID.
5
Which component is affected by CVE-2026-15597?
CVE-2026-15597 affects the edit_exam2.php file in the SourceCodester Class and Exam Timetabling System.