CVE-2026-3486

MEDIUM

itsourcecode College Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References (5)

Scores

CVSS v3 4.7
EPSS 0.0001
EPSS Percentile 0.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-89 CWE-74
Status published

Affected Products (1)

angeljudesuarez/college_management_system

Timeline

Published Mar 03, 2026
Tracked Since Mar 04, 2026