CVE-2026-16228 in Class and Exam Timetabling System

Prediction

by VulDB Data Team • 07/18/2026

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /edit_schoolyr.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-380050
• CPE: ready
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-16228
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-16228
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-16228/