PT-2026-24921 · Itsourcecode · University Event Management System

Pipizzz · Publicado 2026-03-12 · Atualizado 2026-03-12 · CVE-2026-3982

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions itsourcecode University Management System version 1.0

Description A flaw exists in itsourcecode University Management System that allows for cross site scripting. This issue is related to an unknown functionality within the /view result.php file. Manipulating the vr argument can trigger the flaw, allowing for remote execution of attacks. The exploit for this issue has been publicly disclosed.

Recommendations Versions prior to 1.0 should be updated. As a temporary workaround, consider restricting access to the /view result.php file to minimize the risk of exploitation. Avoid manipulating the vr argument in the affected API endpoint until the issue is resolved.

Exploit

Correção

Code Injection

XSS

Enumeração de Fraquezas

CWE-94

CWE-79

Identificadores relacionados

CVE-2026-3982

Produtos afetados

University Event Management System

Referências · 10

• 🔥 https://github.com/PIPIzzz1/aaa/issues/1 · Exploit
• https://t.me/cveNotify/155228 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-3982 · Nota de Segurança
• https://itsourcecode.com · Nota
• https://vuldb.com/?id.350417 · Nota
• https://t.me/CVEtracker/47230 · Publicação no Telegram
• https://vuldb.com/?ctiid.350417 · Nota
• https://twitter.com/CVEnew/status/2031992334473396307 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2032100367488729153 · Publicação no Twitter
• https://vuldb.com/?submit.769668 · Nota