CVE-2026-85512— SourceCodester Class and Exam Timetabling System session.php authorization
Quick assessment
Affected
SourceCodester Class and Exam Timetabling System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 SourceCodester Class and Exam Timetabling System 1.0 中发现了一个安全漏洞。该漏洞影响了 文件中未知代码。由于对参数 的处理不当，导致授权机制缺失。该漏洞可被远程利用，且相关利用代码（exploit）已经公开，可能被用于实际攻击。
Possible ATT&CK Techniques 2 AI
T1071.002 · File Transfer Protocols T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SourceCodester | Class and Exam Timetabling System | 1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85512
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Class and Exam Timetabling System session.php authorization
Source: CVE Program / CVE List V5
Vulnerability Description
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Class and Exam Timetabling System | 1.0 |
cpe:2.3:a:sourcecodester:class_and_exam_timetabling_system:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-85512
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85512
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-85512 (1)
Proof of Concept for CVE-2026-85512 (1)
Other References for CVE-2026-85512 (3)
-
🔗 CVE-2026-85512 in Class and Exam Timetabling System third-party-advisory
-
🔗 CVE-2026-85512 SourceCodester Class and Exam Timetabling System session.php authorization vdb-entry technical-description
IV. Related Vulnerabilities
Same product: Class and Exam Timetabling System
-
CVE-2026-78115
SourceCodester Class and Exam Timetabling System User Accoun -
CVE-2026-78055
SourceCodester Class and Exam Timetabling System BSIT2.php c -
CVE-2026-78054
SourceCodester Class and Exam Timetabling System BSIS1.php c -
CVE-2026-75080
SourceCodester Class and Exam Timetabling System edit_subjec -
CVE-2026-75079
SourceCodester Class and Exam Timetabling System edit_subjec
Same vendor: SourceCodester
-
CVE-2026-86162
SourceCodester Online Voting System ajax.php login sql injec -
CVE-2026-86161
SourceCodester Online Voting System ajax.php delete_category -
CVE-2026-86160
SourceCodester Online Voting System ajax.php delete_voting s -
CVE-2026-86159
SourceCodester Online Voting System ajax.php save_user sql i -
CVE-2026-82554
SourceCodester Queue Management System add_customer.php cros
Same weakness: CWE-862
-
CVE-2026-86194
Grav Form Plugin before 9.1.22 Cross-Page Form Execution -
CVE-2026-15550
Ninja Forms - Save Progress <= 3.0.30 - Missing Authorizatio -
CVE-2025-9049
Nokri – Job Board WordPress Theme <= 1.6.4 - Missing Authori -
CVE-2026-12843
LearnDash LMS 4.25.0 - 5.1.6 - Unauthenticated Arbitrary Cou -
CVE-2026-86178
Pixelfed through 0.12.9 Unauthorized Story Access via API
V. Comments for CVE-2026-85512
No comments yet