CVE-2026-9575: itsourcecode Student Transcript Processing System index.php sql injection
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
itsourcecode Student Transcript Processing System 1.0from your environment.Uninstall or take offline the affected application if it is not required or until a proper fix is available.
- Compensating control
Restrict access to the administration area and specifically /admin/modules/class/index.php?view=view to trusted IP addresses via firewall or network ACLs; deploy a WAF rule to block SQL injection attempts targeting the 'ID' parameter.
- Operational
Rotate any credentials that may have been exposed (database credentials, administrative accounts) and review logs/forensic evidence for signs of exploitation, since the issue is publicly disclosed and may have been used.
- Operational
Fix the application code in /admin/modules/class/index.php to properly validate and sanitize the 'ID' parameter and use parameterized queries (prepared statements) to prevent SQL injection.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9575?
CVE-2026-9575 has a severity rating of 7.3, classified as high.
What type of vulnerability is CVE-2026-9575?
CVE-2026-9575 is a SQL Injection vulnerability affecting the itsourcecode Student Transcript Processing System.
How do I fix CVE-2026-9575?
To fix CVE-2026-9575, validate and sanitize user inputs to prevent SQL Injection.
Can CVE-2026-9575 be exploited remotely?
Yes, CVE-2026-9575 can be exploited remotely through manipulation of the ID argument.
Which file is affected by CVE-2026-9575?
CVE-2026-9575 affects the file /admin/modules/class/index.php in the itsourcecode Student Transcript Processing System.