College Management System CVE-2026-4485

The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) indicates a network-exploitable vulnerability requiring low attack complexity and authenticated access, with limited scope and confidentiality, integrity, and availability impact. The E:P (Exploit maturity: Proof of Concept) and RC:R (Reliability: Reasonable) ratings, combined with the public GitHub PoC availability, indicate that exploitation is practical and reproducible. However, the PR:L (Privilege Required: Low) constraint—requiring valid administrative credentials—significantly limits real-world risk compared to unauthenticated SQL injection vulnerabilities. The medium CVSS score of 6.3 reflects this authentication requirement; organizations should prioritize this vulnerability based on the sensitivity of their student data and the trustworthiness of administrative user populations, but it does not warrant emergency patching compared to unauthenticated critical vulnerabilities. The presence of a public exploit and documented vulnerability timeline (VulDB ID 352008) suggests disclosure has occurred, warranting timely remediation within standard patching cycles.

An administrator with legitimate credentials logs into the College Management System's admin panel and navigates to the student search function (/admin/search_student.php). An attacker who has compromised or gained knowledge of administrative credentials (or who is a malicious insider) enters a crafted SQL injection payload in the Search field, such as ' OR '1'='1 or a UNION-based query to extract sensitive student records including names, contact information, grades, or personal identification numbers. The unsanitized input is directly concatenated into the underlying SQL query, allowing the attacker to bypass intended query logic and exfiltrate or modify records. Since a public proof-of-concept is available on GitHub, this attack can be executed by individuals with moderate technical skill and valid administrative access.