Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-3151: itsourcecode College Management System 1.0: Email SQL Injection Risk

CVE-2026-3151 · published 8 months ago

Summary

The itsourcecode College Management System 1.0 has a security issue with its login feature. If an attacker knows how to manipulate the email field when logging in, they may be able to access sensitive data or take control of the system. Update the system immediately to protect against potential attacks.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
angeljudesuarez	college_management_system	1.0 `cpe:2.3:a:angeljudesuarez:college_management_system:1.0:::::::*`

Original advisory text

A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

References

https://github.com/Zhangchao404/cve/issues/3 Exploit Third Party Advisory
https://itsourcecode.com/ Product
https://vuldb.com/?ctiid.347659 Permissions Required VDB Entry
https://vuldb.com/?id.347659 Third Party Advisory VDB Entry
https://vuldb.com/?submit.758830 Third Party Advisory VDB Entry

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-74Injection

CWE-89SQL Injection

Timeline

Published25 Feb 2026

Updated4 Nov 2026

First seen6 Mar 2026

Sources

CVE-2026-3151 · NVD

Track software like this

Free during beta