CVE-2026-9583
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A weakness in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 was found in the /index.php file of the SQL Handler component. Manipulation can lead to information exposure through error messages.
Risk Assessment
A remote attacker can obtain sensitive system data via SQL errors, potentially facilitating further attacks.
Recommendation
Update the system to the latest version or apply available patches. Restrict access to /index.php.
Other vulnerabilities in SourceCodester CET Automated Grading System
See all- CVE-2026-76999Medium
The vulnerability in SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0 concerns improper authorization in the add_grade function in /index.php. Manipulation of the student_id argument allows unauthorized access, and the attack can be initiated remotely.
- CVE-2026-14609Medium
A session fixation vulnerability was found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The attack can be executed remotely but requires high complexity and is considered difficult. The exploit is publicly available.
- CVE-2026-14608Medium
A security vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0, allowing authorization bypass via manipulation of the ID argument in the POST request to /index.php?action=view_student. Remote exploitation is possible and the exploit has been publicly disclosed.
- CVE-2026-9582Medium
A Cross-Site Request Forgery (CSRF) vulnerability has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The attack can be performed remotely, and the exploit has been publicly released.
Original NVD description (English source)
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the component SQL Handler. Executing a manipulation can lead to information exposure through error message. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.