CVE-2026-86280: SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
Published Sep 7, 2026
·Updated
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cictportal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Affected Software
1 affected component
Sourcecodester Syllabus-Aligned Learning Management & Examination System=1.0
Event History
Sep 7, 2026
CVE Published
via MITRE·07:15 AM
Data Sourced
via MITRE·07:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation can be performed remotely, requires no prior privileges, and does not require user interaction. The attack complexity is rated low, and a public exploit is available.
2
What is the expected security impact if exploitation succeeds?
The reported impact is limited confidentiality loss. No integrity or availability impact is indicated by the supplied CVSS metrics.