CVE-2026-86221: SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection
Published Sep 6, 2026
·Updated
A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqliquery of the file /admin/modaladdcourse1.php. This manipulation of the argument course causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
1 affected component
Sourcecodester Class and Exam Timetabling System=1.0
Event History
Sep 6, 2026
CVE Published
via MITRE·06:15 PM
Data Sourced
via MITRE·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The attack can be initiated remotely and requires no privileges or user interaction according to the supplied severity vector. An exposed instance running version 1.0 is therefore at risk.
2
What input and component are involved?
The SQL injection is associated with manipulation of the course argument in /admin/modal_add_course1.php, where it reaches mysqli_query.
3
Is public exploit information available?
Yes. The exploit has been published and may be used.