CVE-2026-3152: itsourcecode College Management System teacher-salary.php sql injection
A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacherid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3152?
CVE-2026-3152 has a high severity due to the potential for SQL injection, allowing attackers to manipulate database queries.
How do I fix CVE-2026-3152?
To fix CVE-2026-3152, validate and sanitize user inputs for the teacher_id parameter in the teacher-salary.php file.
What types of attacks can CVE-2026-3152 enable?
CVE-2026-3152 can enable various attacks such as data theft, data manipulation, and unauthorized access to sensitive information.
Which software is affected by CVE-2026-3152?
CVE-2026-3152 affects the itsourcecode College Management System version 1.0.
How can I detect CVE-2026-3152 in my system?
You can detect CVE-2026-3152 by auditing the /admin/teacher-salary.php file for vulnerabilities related to SQL injection in the teacher_id parameter.