{"id":"CVE-2026-14608","state":"PUBLISHED","title":"SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization","description":"A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=view_student of the component POST Handler. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.","publishedAt":"2026-07-03T20:00:09.634Z","updatedAt":"2026-07-07T02:17:32.981Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester CET Automated Grading System with AI Predictive Analytics"],"affected":[{"vendor":"SourceCodester","product":"CET Automated Grading System with AI Predictive Analytics","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:cet_automated_grading_system_with_ai_predictive_analytics:*:*:*:*:*:*:*:*"],"modules":["POST Handler"]}],"references":["https://vuldb.com/vuln/376116","https://vuldb.com/vuln/376116/cti","https://vuldb.com/cve/CVE-2026-14608","https://vuldb.com/submit/844625","https://www.sourcecodester.com/"],"weaknesses":["CWE-639","CWE-285"],"ingestedAt":"2026-10-29T20:11:00.674Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/14xxx/CVE-2026-14608.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-14608","state":"PUBLISHED","datePublished":"2026-07-03T20:00:09.634Z","dateUpdated":"2026-07-07T02:17:32.981Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-07-03T13:56:09.494Z"},"containers":{"cna":{"title":"SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization","descriptions":[{"lang":"en","value":"A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=view_student of the component POST Handler. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used."}],"affected":[{"vendor":"SourceCodester","product":"CET Automated Grading System with AI Predictive Analytics","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:cet_automated_grading_system_with_ai_predictive_analytics:*:*:*:*:*:*:*:*"],"modules":["POST Handler"]}],"references":[{"url":"https://vuldb.com/vuln/376116","name":"VDB-376116 | SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/376116/cti","name":"VDB-376116 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-14608","name":"CVE-2026-14608 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/844625","name":"Submit #844625 | https://www.sourcecodester.com/ CET Automated Grading System with AI Predictive Analytics in PHP and MySQL 1.0 Insecure Direct Object Reference (IDOR)","tags":["third-party-advisory"]},{"url":"https://www.sourcecodester.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","type":"CWE","lang":"en","description":"Authorization Bypass"}]},{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-07-03T20:00:09.634Z"},"timeline":[{"time":"2026-07-03T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-07-03T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-07-03T16:01:13.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Abhay mp (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB Vulnerability Moderation Team","type":"coordinator"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-07-07T02:17:23.576006Z","id":"CVE-2026-14608","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-07-07T02:17:32.981Z"}}]}}}