Description

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /edit_teacher.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.3",
  "pubDate": "2026-08-15T17:16:23.977Z",
  "pubdate": "2026-08-15T17:16:23.977Z",
  "executiveSummary": "A security vulnerability has been identified in SourceCodester Class and Exam Timetabling System 1.0, specifically within an unknown function in the file /edit_teacher.php. The flaw manifests as a SQL Injection (SQLi) vulnerability, enabling malicious actors to execute arbitrary SQL commands against the underlying database.\nThe vulnerability can be exploited remotely over the network without requiring complex preconditions, allowing unauthorized attackers to compromise the confidentiality, integrity, and availability of the application data. Given that public exploit material has been disclosed, the risk of active exploitation is significantly elevated.\nSuccessful exploitation allows attackers to bypass authentication mechanisms, extract sensitive database contents—such as administrator credentials and user records—and potentially execute administrative operations within the database context.",
  "technicalDetails": "The root cause of the vulnerability lies in insufficient input sanitization and lack of parameterization within the /edit_teacher.php script. Specifically, user-supplied data passed via the ID parameter is concatenated directly into SQL queries without adequate validation or the use of prepared statements.\nThe attack vector is network-based, allowing remote adversaries to interact directly with the vulnerable endpoint. An attacker initiates the exploitation flow by supplying a crafted HTTP request containing malicious SQL payloads within the ID parameter of the /edit_teacher.php URI.\nBecause the application fails to properly escape or contextualize the input, the database query interpreter parses the injected payload as executable SQL syntax rather than literal data. This alters the intended logic of the database query structure.\nDepending on the nature of the payload, the attack can manifest as in-band SQL injection (such as Error-Based or Union-Based SQLi), causing the database to return sensitive query results directly in the HTTP response, or as boolean/time-based blind SQL injection.\nThe vulnerable component is the database interaction logic handling teacher record modifications. Affected versions are restricted to SourceCodester Class and Exam Timetabling System 1.0. The exploit requires no prior privileges if authentication checks are bypassed or absent on the targeted function, leading to full database compromise."
}