Threat database

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument course_year_section can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a manipulation of the argument course_year_section results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

CVE-2026-12529 is a medium severity vulnerability in SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0. It involves improper access controls in an unspecified function within the /index.php file related to the Student Self-Registration Endpoint. The vulnerability allows remote attackers to exploit the system without authentication or user interaction.

A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The impacted element is an unknown function of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file import_users.php. The manipulation of the argument raw_password with the input CICT_2026 leads to use of hard-coded password. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.

SourceCodester Inventory System version 1.0 contains a cross-site scripting (XSS) vulnerability in the header.php file. This vulnerability allows remote attackers to inject malicious scripts via multiple parameters. The issue has a medium severity rating with a CVSS score of 5.1. No official patch or remediation guidance is currently available from the vendor. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been reported.

CVE-2026-11519 is a medium severity vulnerability in SourceCodester Inventory System 1.0. It involves improper authorization due to manipulation of the ROLE argument in the /Product_Inventory/api/users_handler.php file within the Account Creation Handler component. The flaw can be exploited remotely without user interaction. Public exploit code is available, increasing the risk of attack. No official patch or remediation guidance has been provided by the vendor as of the publication date.

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

A vulnerability has been found in SourceCodester Barangay Resident Profiling and Information Management System 1.0. The impacted element is an unknown function of the file passsword_reset.php of the component Password Reset Handler. Such manipulation of the argument new_password with the input password123 leads to use of hard-coded password. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=save_patient. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-11486 is a SQL injection vulnerability in SourceCodester Class and Exam Timetabling System version 1.0. The issue exists in the /archive1.php file where manipulation of the 'sy' argument allows SQL injection. This vulnerability can be exploited remotely without authentication. The CVSS score is 6.9, indicating a medium severity level. No official patch or remediation has been provided yet.

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation of the argument sy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-11484 is a SQL injection vulnerability in SourceCodester Class and Exam Timetabling System version 1.0. The issue exists in the /archive3.php file where the 'sy' argument is improperly handled, allowing remote attackers to manipulate SQL queries. This vulnerability has a medium severity score of 6.9 and could potentially be exploited to compromise the database. No official patch or remediation guidance has been provided yet.

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /archive4.php. The manipulation of the argument sy results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-11482 is a SQL injection vulnerability in SourceCodester Class and Exam Timetabling System version 1.0. The issue exists in an unknown function within the /archive5.php file, where manipulation of the 'sy' argument allows SQL injection. The vulnerability can be exploited remotely without authentication. No official patch or remediation guidance is currently available.

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /index1.php. This manipulation of the argument Password causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. Performing a manipulation of the argument room results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.