CVE-2026-4485: itsourcecode College Management System search_student.php sql injection
A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/searchstudent.php. The manipulation of the argument Search leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4485?
CVE-2026-4485 has a high severity rating due to its potential for exploitation through SQL injection.
How do I fix CVE-2026-4485?
To fix CVE-2026-4485, update the application to a version that properly sanitizes user inputs to prevent SQL injection.
What systems are affected by CVE-2026-4485?
CVE-2026-4485 specifically affects version 1.0 of the itsourcecode College Management System.
What type of vulnerability is CVE-2026-4485?
CVE-2026-4485 is classified as an SQL injection vulnerability, allowing attackers to manipulate database queries.
Where is the vulnerability located in CVE-2026-4485?
The vulnerability in CVE-2026-4485 is found in the /admin/search_student.php file within the College Management System.