Logo
Retour à la veille

CVE-2026-86225

Publié : 6 septembre 2026
Modifié : 6 septembre 2026
Lien officiel NVD
Score CVSS
7.3
HIGH

Description détaillée

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqli_query of the file /admin/modal_add_room.php. The manipulation of the argument room_name leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/justconter/_CVE/issues/6https://vuldb.com/cve/CVE-2026-86225https://vuldb.com/submit/897751https://vuldb.com/vuln/399378https://vuldb.com/vuln/399378/ctihttps://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-84820

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

VOIR DÉTAILS

CVE-2026-84818

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

VOIR DÉTAILS

CVE-2026-84817

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

VOIR DÉTAILS