CVE-2026-13527: falha de média gravidade em SourceCodester Class and Exam Timetabling System
SourceCodester Class and Exam Timetabling System preview4.php sql injection
Publicada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.9epss 0.4%
probabilidade de exploração
0.4%top 65% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /preview4.php. Such manipulation of the argument course_year_section leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
SourceCodester · Class and Exam Timetabling SystemPoCs públicas encontradas — 1
cve_referencegithub.com/yuanyuandechen/vul/issues/1não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — SourceCodester Class and Exam Timetabling System
No mesmo produto, das mais perigosas para as menos.
CVE-2023-1039HIGHSourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injectionEPSS 0.8%CVE-2026-85512MEDIUMSourceCodester Class and Exam Timetabling System session.php authorizationEPSS 0.5%CVE-2026-15715MEDIUMSourceCodester Class and Exam Timetabling System exam.php cross site scriptingEPSS 0.5%CVE-2026-90615MEDIUMSourceCodester Class and Exam Timetabling System subject1.php cross site scriptingEPSS 0.5%CVE-2026-78055MEDIUMSourceCodester Class and Exam Timetabling System BSIT2.php cross site scriptingEPSS 0.5%CVE-2026-78054MEDIUMSourceCodester Class and Exam Timetabling System BSIS1.php cross site scriptingEPSS 0.5%