CVE-2026-93959

A SQL injection vulnerability exists in SourceCodester Online Reviewer Management System 1.0 , specifically in the file /reviewer_0/admins/assessments/course/btn_functions.php. The injection is triggered by manipulating the Course argument. The attack can be carried out remotely with no privilege...

CVE-2026-86223

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

CVE-2026-86223 SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

EUVD-2026-72172

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

CVE-2026-86222

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection vulnerability in the mysqli_query function within /admin/modal_add_course2.php. Manipulation of the course parameter allows a remote, unauthenticated attacker to execute arbitrary SQL queries, resulting in partial...

CVE-2026-86222 SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqliquery of the file /admin/modaladdcourse2.php. Such manipulation of the argument course leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

EUVD-2026-72171

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqliquery of the file /admin/modaladdcourse2.php. Such manipulation of the argument course leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2026-86221

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqliquery of the file /admin/modaladdcourse1.php. This manipulation of the argument course causes sql injection. The attack may be initiated remotely. The exploit has been publish...

EUVD-2026-72170

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqliquery of the file /admin/modaladdcourse1.php. This manipulation of the argument course causes sql injection. The attack may be initiated remotely. The exploit has been publish...

CVE-2026-86221 SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqliquery of the file /admin/modaladdcourse1.php. This manipulation of the argument course causes sql injection. The attack may be initiated remotely. The exploit has been publish...

CVE-2026-86220 SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqliquery of the file /admin/modaladdcourse.php. The manipulation of the argument course results in sql injection. The attack can be launched remotely. The exploit is now...

PT-2026-86566

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the /admin/modal add course2.php file within the mysqli query function. Remote manipulation of the course variable allows for SQL injection, a techniqu...

CVE-2026-78055

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

CVE-2026-78055 SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

CVE-2026-78055

SourceCodester Class and Exam Timetabling System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /BSIT2.php. The flaw is triggered by manipulating the course parameter, allowing a remote attacker to inject malicious scripts that execute in a victim's browser. The attack ...

CVE-2026-78054 SourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the argument course can lead to cross site scripting. The attack may be launched remotely. The exploit has been made availabl...

CVE-2026-78054

SourceCodester Class and Exam Timetabling System 1.0 contains a Cross-Site Scripting (XSS) vulnerability in the file /BSIS1.php . The flaw is triggered by manipulating the course parameter, allowing a remote, unauthenticated attacker to inject malicious scripts into the application. User interact...

CVE-2026-75078 SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the argument course results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-75077

SourceCodester Class and Exam Timetabling System 1.0 has a reflected cross-site scripting (XSS) flaw in BSCE2.php, where the "course" argument is rendered without sanitization, allowing unauthenticated remote attackers to inject scripts; CVSS 4.3 (Medium) scores it as network-accessible with low ...

CVE-2026-16202

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /CYS.php. This manipulation of the argument course causes cross site scripting. The attack is possible to be carried out remotely. The...