CVE-2026-11471

SourceCodester Class and Exam Timetabling System index2.php sql injection

CVSS 6.9 MEDIUMEPSS 0.3%CWE-74 CWE-89

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

SourceCodester · Class and Exam Timetabling System

public PoCs found — 1

cve_referencegithub.com/Icecream102/cve/issues/4unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/Icecream102/cve/issues/4 https://vuldb.com/cve/CVE-2026-11471 https://vuldb.com/submit/833858 https://vuldb.com/vuln/369091 https://vuldb.com/vuln/369091/cti https://www.sourcecodester.com/