CVE-2026-3487

MEDIUM

itsourcecode College Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation of the argument course_code results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

References (5)

Scores

CVSS v3 4.7
EPSS 0.0001
EPSS Percentile 1.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-89 CWE-74
Status published

Affected Products (1)

angeljudesuarez/college_management_system

Timeline

Published Mar 03, 2026
Tracked Since Mar 04, 2026