CVE-2026-9573

HIGH

itsourcecode Student Transcript Processing System index.php sql injection

Title source: cna

Description

A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performing a manipulation of the argument studentId results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used.

References (5)

Core 5

Core References

Vdb Entry, Technical Description vdb-entry technical-description

VDB-365632 | itsourcecode Student Transcript Processing System index.php sql injection

https://vuldb.com/vuln/365632

Signature, Permissions Required signature permissions-required

VDB-365632 | CTI Indicators (IOB, IOC, TTP, IOA)

https://vuldb.com/vuln/365632/cti

Third Party Advisory third-party-advisory

Submit #817552 | itsourcecode Student Transcript Processing System V1.0 SQL Injection

https://vuldb.com/submit/817552

Exploit exploit issue-tracking

https://github.com/nidieaaa/test/issues/12

Product product

https://itsourcecode.com/

Scores

CVSS v3 7.3

EPSS 0.0026

EPSS Percentile 17.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-74 CWE-89

Status published

Products (1)

itsourcecode/Student Transcript Processing System 1.0

Published May 26, 2026

Tracked Since May 27, 2026