CVE-2026-12529
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability has been detected in the SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. It affects an unknown function of the file /index.php of the Student Self-Registration Endpoint, leading to improper access controls.
Risk Assessment
This vulnerability allows for remote exploitation, potentially leading to unauthorized access to the system and student data.
Recommendation
It is recommended to update the system to the latest version and implement additional security measures to protect against unauthorized access.
Other vulnerabilities in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0
See all- CVE-2026-12176Medium
Vulnerability in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. An unknown function in the file /index.php allows XSS attack via manipulation of the action argument. The attack can be carried out remotely.
- CVE-2026-7401Medium
In SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0, the file /index.php?action=register (Registration component) is vulnerable to cross-site scripting via manipulation of the student_id/full_name/section/username arguments. The exploit is public and can be launched remotely.
Original NVD description (English source)
A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Affected is an unknown function of the file /index.php of the component Student Self-Registration Endpoint. The manipulation leads to improper access controls. Remote exploitation of the attack is possible.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS