CVE-2026-9573
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/student/index.php?view=view via the studentId argument. The attack can be performed remotely, and the exploit is publicly available.
Risk Assessment
An attacker can steal or modify database data, including student records and grades, compromising system integrity and confidentiality.
Recommendation
Apply a patch or update the system immediately, and use parameterized queries to prevent SQL injection.
Other vulnerabilities in Student Transcript Processing System
See all- CVE-2026-9575High
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/class/index.php?view=view via the ID argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-9574High
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/student/trans.php via the studentId or cid arguments. The attack can be performed remotely, and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performing a manipulation of the argument studentId results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.