Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was detected in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This affects an unknown function of the file dashboard_page/forms/fetch.php. Performing a manipulation of the argument department_code results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-05 | 1 | Disclosure1 |
| 2026-06-08 | 1 | Patch1 |
| 2026-06-09 | 1 | PoC1 |
#CVE-2026-11334: SQL injection in CollegeManagementSystem (CVSS 7.3). Remotely exploitable via dashboard_page/forms/fetch[.]php. Public exploit available. No patch yet—vendor unresponsive. #CVE #Vulnerability #PatchNow https://t.co/PEDrG51UfP
Post summary
A newly reported SQL injection (CVE‑2026‑11334) in CollegeManagementSystem carries a CVSS 7.3 score and has a publicly available exploit, but no patch has yet been released.
CVE-2026-11334 - SQL injection in Tittuvarghese CollegeManagementSystem. Remote exploit via department_code parameter. CVSS 7.3. Public exploit available. Update immediately if using this software. #CVE #infosec #SQLi #Database Free PATCH available: https://www.valtersit.com/cve/CVE-2026-11334/
Post summary
CVE‑2026‑11334 is a SQL injection vulnerability in Tittuvarghese CollegeManagementSystem with CVSS 7.3; a public exploit exists and a free patch is available via the provided link.
CVE-2026-11334 SQL Injection in tittuvarghese CollegeManagementSystem via Depart... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11334 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A new SQL injection vulnerability, CVE-2026-11334, has been disclosed for tittuvarghese CollegeManagementSystem with details posted on Vulmon, but no PoC, exploit, or patch information is provided.