Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-86224

SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

CVSS 4.0 6.9 MEDIUMCVSS 3.1 7.3 HIGHCVSS 3.0 7.3 HIGHCVSS 2.0 7.5 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-86224

Published

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /admin/modal_add_product.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-86224

Published

Class and Exam Timetabling System

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "SourceCodester",
                    "product": "Class and Exam Timetabling System",
                    "versions": [
                        {
                            "version": "1.0",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:sourcecodester:class_and_exam_timetabling_system:*:*:*:*:*:*:*:*"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON