CVE-2026-11483

SourceCodester Class and Exam Timetabling System archive4.php sql injection

CVSS 6.9 MEDIUMEPSS 0.3%CWE-74 CWE-89

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /archive4.php. The manipulation of the argument sy results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Produtos afetados

SourceCodester · Class and Exam Timetabling System

PoCs públicas encontradas — 1

cve_referencegithub.com/ssaaaa1234/cve/issues/4não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/ssaaaa1234/cve/issues/4 https://vuldb.com/cve/CVE-2026-11483 https://vuldb.com/submit/834108 https://vuldb.com/vuln/369103 https://vuldb.com/vuln/369103/cti https://www.sourcecodester.com/