CVE-2026-13486

HighCVSS 7.3/10Last modified Oct 25, 2026

Description

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument course_year_section can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Class and Exam Timetabling System	1.0; 6.php

References

Timeline

Published: Jun 28, 2026
Last modified: Oct 25, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-134877.3A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive CVE-2026-134887.3A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unkn CVE-2026-134893.1A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of the file main/mcp_ser CVE-2026-134903.7A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the CVE-2026-134913.7A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file m CVE-2026-134928.8The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.65. This is due to insuffici CVE-2026-134933.1A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file backend/controller/con CVE-2026-134954.7A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /adminprofile.php CVE-2026-134966.3A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedic CVE-2026-134976.3A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appo CVE-2026-134987.3A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpasswor CVE-2026-134994.3A security flaw has been discovered in yashpokharna2555 restaurent-management-system. This impacts an unknown function of the file login_reg