6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Basic Information
ID
CVE-2026-11471
Source
VulDB
Published
Jun 8, 2026 at 00:15
Affected Product
Vendor
SourceCodester
Product
Class and Exam Timetabling System
Version
1.0
Affected Versions
SourceCodester Class and Exam Timetabling System 1.0