CVE-2026-9583: SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure

Published May 26, 2026
·
Updated

A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the component SQL Handler. Executing a manipulation can lead to information exposure through error message. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Affected Software

1 affected component
Sourcecodester CET Automated Grading System with AI Predictive Analytics=1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Remove

    Remove SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 from your environment.

    If the application is not required, uninstall or take it offline until an official vendor fix or patch is available.

  2. Configuration

    Disable display of detailed application/SQL error messages to remote users; log errors to server-side logs instead (for example, set PHP display_errors=Off and ensure the application does not echo SQL error details).

    SourceCodester CET Automated Grading System with AI Predictive Analytics (index.php - SQL Handler) display detailed error messages = disable
  3. Compensating control

    Restrict external access to the affected application or server to trusted IPs or an internal network; deploy a Web Application Firewall or rule set to block requests targeting the SQL handler (/index.php) and known exploit patterns until a vendor patch is available.

  4. Operational

    Review application and web server logs for signs of exploitation and indicators of compromise; if exposure is suspected, follow incident response procedures (contain, assess data exposure, notify affected parties, and remediate).

Event History

May 26, 2026
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Jun 29, 58424
Event
via FIRST·08:32 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-9583?

The severity of CVE-2026-9583 is medium with a score of 4.3.

2

What type of exposure does CVE-2026-9583 cause?

CVE-2026-9583 leads to information exposure through error messages.

3

What component of the SourceCodester CET Automated Grading System is affected by CVE-2026-9583?

CVE-2026-9583 affects the SQL Handler component of the /index.php file.

4

How can CVE-2026-9583 be exploited?

CVE-2026-9583 can be exploited by executing a manipulation in the affected function.

5

What is the impact of CVE-2026-9583 on the system?

The impact of CVE-2026-9583 is the potential for unauthorized information exposure.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203