CVE-2026-4485: fallo de gravedad media en itsourcecode College Management System
itsourcecode College Management System search_student.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.3%
A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/search_student.php. The manipulation of the argument Search leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
itsourcecode · College Management SystemCVEs relacionadas — itsourcecode College Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-3151MEDIUMitsourcecode College Management System login.php sql injectionEPSS 0.5%CVE-2026-3152MEDIUMitsourcecode College Management System teacher-salary.php sql injectionEPSS 0.4%CVE-2026-3487MEDIUMitsourcecode College Management System class-result.php sql injectionEPSS 0.4%CVE-2026-3486MEDIUMitsourcecode College Management System student-fee.php sql injectionEPSS 0.4%CVE-2026-3149MEDIUMitsourcecode College Management System asign-single-student-subjects.php sql injectionEPSS 0.3%CVE-2026-3150MEDIUMitsourcecode College Management System display-teacher.php sql injectionEPSS 0.3%