CVE-2026-3487 - Vulnerability Analysis

Overview

itsourcecode College Management System 1.0 contains a sql injection caused by manipulation of the "course_code" argument in /admin/class-result.php, letting remote attackers execute arbitrary SQL commands, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version or apply vendor patches addressing this vulnerability.

References

• https://itsourcecode.com/
• https://vuldb.com/?ctiid.348562
• https://vuldb.com/?id.348562
• https://vuldb.com/?submit.765095
• https://github.com/ltranquility/cve_submit/issues/8

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner