CVE-2026-3411

critical

Published 2026-03-02 · Modified 2026-04-29

CVSS v3

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2

7.5

VIR risk

9.8

Description

A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Predictions

Exploit likelihood

97%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cna@vuldb.com — https://github.com/dyh1213-wq/cve/issues/2

Application impact

Vendor	Product	Versions	Fixed
angeljudesuarez	university_management_system	`1.0`

References

https://github.com/dyh1213-wq/cve/issues/2
https://itsourcecode.com/
https://vuldb.com/?ctiid.348306
https://vuldb.com/?id.348306
https://vuldb.com/?submit.763769

CWEs

CWE-74 CWE-89

Verify integrity in audit chain (admin only). AS-IS.