Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
itsourcecode University Management System: Remote Code Execution through /view_result.php
CVE-2026-3982
Summary
The itsourcecode University Management System 1.0 has a vulnerability that allows an attacker to inject malicious code into the system, potentially allowing them to take control of sensitive data or the entire system. This vulnerability can be exploited remotely, meaning an attacker doesn't need to be on the same network as the system. Update to the latest version of the system as soon as possible to fix this vulnerability.
Original title
A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing a manipulation of...
Original description
A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
nvd CVSS2.0
5.0
nvd CVSS3.1
4.3
nvd CVSS4.0
5.3
Vulnerability type
CWE-79
Cross-site Scripting (XSS)
CWE-94
Code Injection
Published: 12 Mar 2026 · Updated: 13 Mar 2026 · First seen: 12 Mar 2026