This vulnerability affects version 1.0 of the SourceCodester CET Automated Grading System with AI Predictive Analytics. An attacker can remotely manipulate an unknown function in the SQL Handler component (/index.php) to trigger error messages that expose sensitive information. The CVSS 4.0 base score is 5.3, indicating a medium severity impact. No official fix or patch has been published by the vendor, and the product is not a cloud service, so remediation depends on vendor or user action.

Successful exploitation may lead to information disclosure through error messages, potentially revealing sensitive internal details that could aid further attacks. The vulnerability requires no privileges or user interaction and can be exploited remotely. However, the impact is limited to information exposure without direct evidence of further compromise or data modification.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected component or implementing web application firewall rules to block suspicious requests targeting /index.php SQL Handler functions.