CVE-2026-3151: itsourcecode College Management System login.php sql injection
A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3151?
CVE-2026-3151 is considered a high severity SQL injection vulnerability that can lead to unauthorized access to database content.
How do I fix CVE-2026-3151?
To fix CVE-2026-3151, implement parameterized queries or prepared statements to prevent SQL injection in the /login/login.php file.
What software is affected by CVE-2026-3151?
The affected software for CVE-2026-3151 is the itsourcecode College Management System version 1.0.
What is the attack vector for CVE-2026-3151?
The attack vector for CVE-2026-3151 is the manipulation of the 'email' argument in the /login/login.php file.
What types of data can be accessed through CVE-2026-3151?
CVE-2026-3151 may allow attackers to retrieve sensitive data from the database, potentially exposing user credentials and other confidential information.