CVE-2026-3151

HIGH

itsourcecode College Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0003
EPSS Percentile 8.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-89 CWE-74
Status published

Affected Products (1)

angeljudesuarez/college_management_system

Timeline

Published Feb 25, 2026
Tracked Since Feb 25, 2026