PT-2026-46960 · Tittuvarghese · College Management System

Nicole_Mo · Published 2026-06-05 · Updated 2026-06-05 · CVE-2026-11334

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown function of the file dashboard page/forms/fetch.php. Performing a manipulation of the argument department code results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-11334

Affected Products

College Management System

References · 7

• 🔥 https://github.com/tittuvarghese/CollegeManagementSystem/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11334 · Security Note
• https://vuldb.com/cve/CVE-2026-11334 · Note
• https://vuldb.com/vuln/368872/cti · Note
• https://github.com/tittuvarghese/CollegeManagementSystem · Note
• https://vuldb.com/submit/832535 · Note
• https://vuldb.com/vuln/368872 · Note