Vulnerability · Published May 26, 2026 · Assigned by VulDB
CVE-2026-9583SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure
Medium 4.3
In plain English
A medium-severity information exposure in CET Automated Grading System with AI Predictive Analytics from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Official description
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the component SQL Handler. Executing a manipulation can lead to information exposure through error message. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | CET Automated Grading System with AI Predictive Analytics | 1.0 |
Weakness: CWE-209, CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-365639 | SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure vdb-entry
- VDB-365639 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #817932 | SourceCodester CET Automated Grading System with AI Predictive Analytics in PHP and MySQL 1.0 Information Disclosure third-party-advisory
- https://github.com/NARKHEDE-VAIBHAV/poc/blob/main/CVE-2026-9583-Information-Disclosure/Advisory.md exploit
- https://github.com/NARKHEDE-VAIBHAV/poc/blob/main/CVE-2026-9583-Information-Disclosure/poc.sh exploit
- https://www.sourcecodester.com/ product