CVE-2026-9575
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/class/index.php?view=view via the ID argument. The attack can be performed remotely, and the exploit is publicly available.
Risk Assessment
An attacker can steal or modify database data, including student records and grades, compromising system integrity and confidentiality.
Recommendation
Apply a patch or update the system immediately, and use parameterized queries to prevent SQL injection.
Other vulnerabilities in Student Transcript Processing System
See all- CVE-2026-9574High
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/student/trans.php via the studentId or cid arguments. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-9573High
Student Transcript Processing System 1.0 from itsourcecode has an SQL injection vulnerability in /admin/modules/student/index.php?view=view via the studentId argument. The attack can be performed remotely, and the exploit is publicly available.
Original NVD description (English source)
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.