CVE-2026-4241

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/time-table.php. Such manipulation of the argument course_code leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-424106.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for CVE-2026-424118.1Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.CVE-2026-424126.5Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. Thi CVE-2026-424137.5Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions.CVE-2026-424148.5Subscriber SQL Injection in ListingPro <= 2.9.12 versions.CVE-2026-424159.3Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.CVE-2026-424168.5Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.CVE-2026-424179.3Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.CVE-2026-424187.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rock CVE-2026-424195.9Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.CVE-2026-42422.5A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an unknown function of th CVE-2026-424206.5OpenClaw before 2026.4.8 contains improper input validation in base64 decode paths that allocate memory before enforcing decoded-size limits