CVE-2026-3150

MEDIUM

itsourcecode College Management System 1.0 - SQL Injection

Title source: llm

Description

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

References (5)

Scores

CVSS v3 6.3
EPSS 0.0003
EPSS Percentile 9.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-74 CWE-89
Status published

Affected Products (1)

angeljudesuarez/college_management_system

Timeline

Published Feb 25, 2026
Tracked Since Feb 25, 2026