CVE-2026-4485

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/search_student.php. The manipulation of the argument Search leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Mar 20, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-448508.5Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swa CVE-2026-448527.2An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the c CVE-2026-448537.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation CVE-2026-448547.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation CVE-2026-448557.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line inte CVE-2026-448567.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line inte CVE-2026-448577.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line inte CVE-2026-448587.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line inte CVE-2026-448597.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line inte CVE-2026-44868.8A vulnerability was found in D-Link DIR-513 1.10. This affects the function formEasySetPassword of the file /goform/formEasySetPassword of t CVE-2026-448607.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface CVE-2026-448617.2SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface