PT-2026-43185 · Itsourcecode · Electronic Judging System

Zulu · Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-9528

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /admin/delete judge.php. Such manipulation of the argument judge id leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Exploit

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-9528

Affected Products

Electronic Judging System

References · 5

• 🔥 https://github.com/zulu225588/zulu-loudong/issues/4 · Exploit
• https://itsourcecode.com · Note
• https://vuldb.com/submit/814738 · Note
• https://vuldb.com/vuln/365547/cti · Note
• https://vuldb.com/vuln/365547 · Note