Veille CVE

Dimanche 28 juin 2026

4 CVE

  1. CVE-2026-13488 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown functionality of the file /preview7.php. The manipulation of the argument course_year_section results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

  2. CVE-2026-13487 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive.php. The manipulation of the argument sy leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

  3. CVE-2026-13486 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument course_year_section can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

  4. CVE-2026-13485 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a manipulation of the argument course_year_section results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.