Veille CVE

Lundi 29 juin 2026

5 CVE

Critique 0 Élevée 5 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « SourceCodester Class and Exam Timetabling System » ✕
  1. CVE-2026-13566 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /preview3.php. The manipulation of the argument course_year_section leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

  2. CVE-2026-13565 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /edit_class1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

  3. CVE-2026-13527 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /preview4.php. Such manipulation of the argument course_year_section leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

  4. CVE-2026-13526 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_class.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.

  5. CVE-2026-13521 7.3 Élevée

    SourceCodester Class and Exam Timetabling System

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functionality of the file /preview5.php. Such manipulation of the argument course_year_section leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.