CVE-2026-9575
HighSummary
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0, affecting some unknown processing of the file /admin/modules/class/index.php?view=view. Manipulation of the argument ID leads to SQL injection.
Risk Assessment
An attacker may remotely exploit this vulnerability, potentially leading to unauthorized access to the database and data leakage.
Recommendation
It is recommended to update the system to the latest version and implement input data filtering to prevent SQL injection.
Original NVD description (English source)
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.