PT-2026-57968 · Itsourcecode · Electronic Judging System

Lihongming · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-15672

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was determined in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /intrams/admin/add judges.php. This manipulation of the argument fname causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-15672

Produtos afetados

Electronic Judging System

Referências · 7

• 🔥 https://github.com/sjmycz/cve/issues/1 · Exploit
• https://vuldb.com/vuln/378164/cti · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15672 · Nota de Segurança
• https://vuldb.com/submit/855930 · Nota
• https://vuldb.com/cve/CVE-2026-15672 · Nota
• https://itsourcecode.com · Nota
• https://vuldb.com/vuln/378164 · Nota