CVE-2026-9574
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/student/trans.php via the studentId or cid arguments. The attack can be performed remotely, and the exploit is publicly available.
Risk Assessment
An attacker can steal or modify database data, including student records and grades, compromising system integrity and confidentiality.
Recommendation
Apply a patch or update the system immediately, and use parameterized queries to prevent SQL injection.
Other vulnerabilities in Student Transcript Processing System
See all- CVE-2026-9575High
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/class/index.php?view=view via the ID argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-9573High
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/student/index.php?view=view via the studentId argument. The attack can be performed remotely, and the exploit is publicly available.
Original NVD description (English source)
A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a manipulation of the argument studentId/cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.