CVE-2026-16152: SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /editrooma.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16152?
CVE-2026-16152 has a high severity rating of 7.3.
What type of vulnerability is CVE-2026-16152?
CVE-2026-16152 is classified as an SQL Injection vulnerability.
How does CVE-2026-16152 affect the SourceCodester Class and Exam Timetabling System?
CVE-2026-16152 allows a remote attacker to exploit the application through manipulation of the argument ID in the /edit_rooma.php file.
How do I fix CVE-2026-16152?
To fix CVE-2026-16152, validate and sanitize all user inputs and implement prepared statements to mitigate SQL injection risks.
Can CVE-2026-16152 be exploited remotely?
Yes, CVE-2026-16152 can be exploited remotely due to its nature.