CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the SourceCodester Class and Exam Timetabling System 1.0, specifically within the /BSCE2.php file, where manipulation of the 'course' argument can be exploited. This flaw allows remote attackers to execute malicious scripts in the context of a user's session, potentially compromising user data and session integrity. Organizations using this system should prioritize remediation to mitigate the risk of exploitation, especially if they handle sensitive user information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulation of the argument course leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used.