CVE-2026-3765

HIGH

itsourcecode University Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

References (5)

[Issue Tracking] https://github.com/mfcluvlife12345-eng/xianyu/issues/1

[Various Sources] https://itsourcecode.com/

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.349743

[Permissions Required, VDB Entry] https://vuldb.com/?id.349743

[Permissions Required, VDB Entry] https://vuldb.com/?submit.768247

Scores

CVSS v3 7.3

EPSS 0.0003

EPSS Percentile 8.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE

CWE-89 CWE-74

Status published

Affected Products (1)

angeljudesuarez/university_management_system

Timeline

Published Mar 08, 2026

Tracked Since Mar 09, 2026