CVE-2026-75080
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0, affecting the file /edit_subject1.php. Manipulation of the argument ID leads to SQL injection. The attack can be carried out remotely and the exploit has been disclosed publicly.
Risk Assessment
An attacker can manipulate SQL queries, potentially leading to unauthorized data access or corruption.
Recommendation
Apply patches or use parameterized queries. Restrict access to edit_subject1.php.
Original NVD description (English source)
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_subject1.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.