CVE-2026-9483— SourceCodester Student Grades Management System grades.php improper authorization
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SourceCodester | Student Grades Management System | 1.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9483
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Student Grades Management System grades.php improper authorization
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the file grades.php. Performing a manipulation of the argument student_id results in improper authorization. The attack may be initiated remotely. The exploit has been made public and could be used.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Student Grades Management System | 1.0 | cpe:2.3:a:sourcecodester:student_grades_management_system:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-9483
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9483
请登录查看更多情报信息。
Other References for CVE-2026-9483 (2)
Same Patch Batch · SourceCodester · 2026-05-25 · 12 CVEs total
| CVE-2026-9447 | 7.3 HIGH | SourceCodester Simple POS and Inventory System search.php sql injection |
| CVE-2026-9484 | 6.3 MEDIUM | SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom i |
| CVE-2026-9445 | 6.3 MEDIUM | SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted |
| CVE-2026-9412 | 6.3 MEDIUM | SourceCodester Indian Invoicing System Backend Endpoint access control |
| CVE-2026-9411 | 6.3 MEDIUM | SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection |
| CVE-2026-9446 | 4.7 MEDIUM | SourceCodester Simple POS and Inventory System edit_customer.php sql injection |
| CVE-2026-9444 | 4.7 MEDIUM | SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql |
| CVE-2026-9486 | 4.3 MEDIUM | SourceCodester Student Grades Management System cross-site request forgery |
| CVE-2026-9413 | 4.3 MEDIUM | SourceCodester Indian Invoicing System category.php cross site scripting |
| CVE-2026-9485 | 3.5 LOW | SourceCodester Student Grades Management System students.php cross site scripting |
| CVE-2026-9414 | 3.5 LOW | SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.p |
IV. Related Vulnerabilities
Same product: Student Grades Management System
- CVE-2026-9486
SourceCodester Student Grades Management System cross-site r - CVE-2026-9485
SourceCodester Student Grades Management System students.php - CVE-2026-9484
SourceCodester Student Grades Management System classroom.ph - CVE-2025-13349
SourceCodester Student Grades Management System Add New Grad - CVE-2025-12332
SourceCodester Student Grades Management System admin.php de
Same vendor: SourceCodester
- CVE-2026-9603
SourceCodester eDoc Doctor Appointment System delete-session - CVE-2026-9583
SourceCodester CET Automated Grading System with AI Predicti - CVE-2026-9582
SourceCodester CET Automated Grading System with AI Predicti - CVE-2026-9564
SourceCodester/oretnom23 Hospitals Patient Records Managemen - CVE-2026-9486
SourceCodester Student Grades Management System cross-site r
Same weakness: CWE-285
- CVE-2026-46620
e107: CSRF in comment.php moderation endpoints via token-opt - CVE-2026-9484
SourceCodester Student Grades Management System classroom.ph - CVE-2026-9410
Sushmi-pal Invoice-System Profile Workflow profile improper - CVE-2026-9409
Sushmi-pal Invoice-System User Management user improper auth - CVE-2026-9397
Besen BS20 EV Charging Station OTA Update Installation impro
V. Comments for CVE-2026-9483
No comments yet