CVE-2026-3149: itsourcecode College Management System asign-single-student-subjects.php sql injection
A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3149?
CVE-2026-3149 is classified as a high severity SQL injection vulnerability.
How do I fix CVE-2026-3149?
To fix CVE-2026-3149, ensure to sanitize and validate all user input in the asign-single-student-subjects.php file.
What systems are affected by CVE-2026-3149?
CVE-2026-3149 affects version 1.0 of the itsourcecode College Management System.
Can CVE-2026-3149 be exploited remotely?
Yes, CVE-2026-3149 can be exploited remotely if an attacker sends crafted SQL queries through the vulnerable input fields.
What are the potential impacts of exploiting CVE-2026-3149?
Exploiting CVE-2026-3149 could allow an attacker to gain unauthorized access to the database and potentially extract sensitive information.