CyberRota Analysis
AI-GeneratedThe SourceCodester Class and Exam Timetabling System 1.0 is vulnerable to SQL injection through the /delete_subject.php file, allowing attackers to manipulate the ID argument. This flaw can be exploited remotely, potentially leading to unauthorized access to sensitive data or database manipulation. Organizations using this system should prioritize patching or mitigating this vulnerability to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /delete_subject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.