CVE-2026-86220

Publié : 6 septembre 2026

Modifié : 6 septembre 2026

Score CVSS

7.3

HIGH

Description détaillée

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli_query of the file /admin/modal_add_course.php. The manipulation of the argument course results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/justconter/_CVE/issues/1 https://vuldb.com/cve/CVE-2026-86220 https://vuldb.com/submit/897734 https://vuldb.com/vuln/399373 https://vuldb.com/vuln/399373/cti https://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-84820

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

VOIR DÉTAILS

CVE-2026-84818

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

VOIR DÉTAILS

CVE-2026-84817

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

VOIR DÉTAILS