ГлавнаяУязвимости → CVE-2026-13486
7.3высокая

CVE-2026-13486

Описание

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument course_year_section can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Источники
https://github.com/lffaker/cybersec/issues/5https://vuldb.com/cve/CVE-2026-13486https://vuldb.com/submit/838188https://vuldb.com/vuln/374483https://vuldb.com/vuln/374483/ctihttps://www.sourcecodester.com/