MEDIUM 5.5 NVD
CVE-2026-86224
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /admin/modal_add_produ
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /admin/modal_add_product.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
References
- https://github.com/justconter/_CVE/issues/5
- https://vuldb.com/cve/CVE-2026-86224
- https://vuldb.com/submit/897750
- https://vuldb.com/vuln/399377
- https://vuldb.com/vuln/399377/cti
This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-09-06 via NVD.
vulnfeed aggregates 9982 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.