Threats affecting pkg:github/nidieaaa/test

CVE-2026-9575 is a medium severity SQL injection vulnerability in itsourcecode Student Transcript Processing System version 1.0. The issue arises from improper handling of the 'ID' parameter in the /admin/modules/class/index.php? view=view endpoint, allowing remote attackers to inject SQL commands. The vulnerability has been publicly disclosed, but no official patch or remediation guidance is currently available.

CVE-2026-9574 is a medium-severity SQL injection vulnerability in itsourcecode Student Transcript Processing System version 1.0. The flaw exists in the /admin/modules/student/trans.php file, where manipulation of the studentId or cid parameters can lead to SQL injection. The vulnerability can be exploited remotely without authentication. Although an exploit has been published, there is no confirmed patch or official remediation available at this time.

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.