CVE-2026-75079
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0, affecting the file /edit_subject2.php. Manipulation of the argument ID leads to SQL injection. The attack can be executed remotely and the exploit has been made public.
Risk Assessment
An attacker can exploit the vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
Apply patches or use parameterized queries. Restrict access to edit_subject2.php.
Original NVD description (English source)
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_subject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.