CVE-2026-86223

Publié : 6 septembre 2026

Modifié : 6 septembre 2026

Score CVSS

7.3

HIGH

Description détaillée

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqli_query of the file /admin/modal_add_coursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/justconter/_CVE/issues/4 https://vuldb.com/cve/CVE-2026-86223 https://vuldb.com/submit/897749 https://vuldb.com/vuln/399376 https://vuldb.com/vuln/399376/cti https://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-84820

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

VOIR DÉTAILS

CVE-2026-84818

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

VOIR DÉTAILS

CVE-2026-84817

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

VOIR DÉTAILS