itsourcecode College Management System SQL Injection Risk

Summary

A security flaw in itsourcecode College Management System allows hackers to access sensitive data. This can happen if an attacker manipulates certain data sent to the system, potentially leading to unauthorized access. Update the system to the latest version to prevent this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
angeljudesuarez	college_management_system	1.0	–

Original title

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teach...

Original description

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

nvd CVSS2.0 6.5

nvd CVSS3.1 8.8

nvd CVSS4.0 5.3

Vulnerability type

CWE-74 Injection

CWE-89 SQL Injection

https://itsourcecode.com/ Product
https://vuldb.com/?ctiid.347658 Permissions Required VDB Entry
https://github.com/Zhangchao404/cve/issues/2 Exploit Issue Tracking Mitigation Third Party Advisory
https://vuldb.com/?id.347658 Third Party Advisory VDB Entry
https://vuldb.com/?submit.758829 Third Party Advisory VDB Entry