CVE-2026-86280: Cleartext Storage of Sensitive Information in SourceCodester Syllabus-Aligned Learning Management & Examination System

This vulnerability in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 allows an attacker to remotely exploit an unknown function in the cict_portal.sql file to cause sensitive information to be stored in cleartext. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. The exploit requires no privileges or user interaction and can be performed over the network. Public exploit code exists, but no official patch or fix details are available.

Sensitive information is stored in cleartext, which could lead to unauthorized disclosure if accessed by an attacker. The vulnerability is remotely exploitable without authentication, increasing the risk of exposure. However, there is no indication of privilege escalation or system compromise beyond information disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system and monitor for suspicious activity related to the vulnerable component.