University Management System
CVE-2026-3411
MEDIUM
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAccess /admin_single_student_update.php endpoint
-
ExploitInject SQL payload in ID parameter
-
ExecutionExecute arbitrary database queries
-
ImpactExtract or modify sensitive student records
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Input neutralization, injection prevention
|
| Exploitation Conditions | No special conditions — remote unauthenticated SQL injection via ID parameter in itsourcecode University Management System 1.0 /admin_single_student_update.php accessible without authentication. |
| Impact | CVSS 7.3 (HIGH). Attack vector: Network. Complexity: Low. Privileges required: None. User interaction: None. Exploitation requires authentication. Exploitable via remote/network. Public exploit/POC available. |
| Exploit ScenarioDerived | A remote attacker (requires authentication) could exploit this flaw, sql injection. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
SQL injection in itsourcecode University Management System 1.0 via the ID parameter in /admin_single_student_update.php allows unauthenticated remote attackers to manipulate database queries and potentially extract or modify sensitive student records. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected institutions at immediate risk.
Earlier versions of this analysis (1)
A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. [CVSS 7.3 HIGH]
RemediationAI
Monitor vendor advisories for a patch. Use parameterized queries. Implement input validation. Restrict network access to the affected service where possible.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Affects University Management System. A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Know when University Management System gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Executive ViewAI
A high-severity vulnerability in the University Management System's student update administrative function poses a significant risk to student data integrity and system availability. Without an available patch and with public exploits circulating, immediate protective measures are required to prevent unauthorized access to sensitive educational records and administrative functions.
Implement Web Application Firewall (WAF) rules to restrict and monitor access to /admin_single_student_update.php; restrict network access to this administrative function via firewall rules limiting to trusted administrative networks only; enforce strong authentication and multi-factor authentication for all administrative accounts; enable comprehensive audit logging for all student data modifications; consider disabling the affected functionality if not business-critical; segment the University Management System on an isolated network; implement intrusion detection signatures for known exploitation patterns of this CVE.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
Affected Products (CPE)CVE.org
Related Vulnerabilities in itsourcecode University Management System SQL Injection
View all 2More in University Management System
View allA vulnerability classified as critical has been found in itsourcecode University Management System 1.0. Rated medium sev
A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Rated medium severity
SQL injection in itsourcecode University Management System 1.0 via the Name parameter in /att_add.php enables unauthenti
SQL injection in itsourcecode University Management System 1.0 via the dt parameter in /att_single_view.php enables remo
SQL injection in itsourcecode University Management System 1.0 via the seme parameter in /view_result.php allows unauthe
SQL injection in itsourcecode University Management System 1.0 via the subject parameter in /add_result.php enables remo
SQL injection in itsourcecode University Management System 1.0 allows remote attackers to manipulate the admin_search_st
A vulnerability classified as critical was found in itsourcecode University Management System 1.0. Rated medium severity
A vulnerability was found in itsourcecode University Management System 1.0. Rated medium severity (CVSS 5.3), this vulne
A vulnerability has been found in itsourcecode University Management System 1.0 and classified as critical. Rated medium
A vulnerability classified as problematic has been found in CodeAstro University Management System 1.0. Rated medium sev
Exploit-DB