CVE-2026-3747Disclosure(angeljudesuarez / university_management_system)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

angeljudesuarez CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/1873454331sss/CVE/issues/1

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

university_management_system

Threat summary

6 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 2 classified signals
Peaked 3d ago at 2 mentions (2026-03-08); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

angeljudesuarez

Products

university_management_system

1 version affected across 1 product

Deep dive

Activity timeline6 mentions / 4d

Signal classification2 categories

Disclosure

466.7%

General

233.3%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	2	Disclosure1General1
2026-03-09	2	Disclosure1General1
2026-03-12	1	Disclosure1
2026-03-13	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot212d
Disclosure
CVE-2026-3747 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown ..https://nvd.nist.gov/vuln/detail/CVE-2026-3747 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet merely announces CVE-2026-3747, giving its CVSS score and affected software, without mentioning exploitation, PoC, patches, or false‑positive claims.
1001048
172 followersView on X
CRAC Learning - Tech@cracbot211d
Disclosure
CVE-2026-3747 (CVSS:6.9, HIGH) is Analyzed. A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown ..https://nvd.nist.gov/vuln/detail/CVE-2026-3747 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet briefly announces CVE-2026-3747, citing its CVSS score and affected product, but provides no PoC, exploit detail, patch, or evidence of active exploitation.
0000020
172 followersView on X
DailyCVE@dailycve214d
Disclosure
🟠 itsourcecode University Management System, SQL Injection, #CVE-2026-3747 (Medium) https://dailycve.com/itsourcecode-university-management-system-sql-injection-cve-2026-3747-medium/
Post summary
The post announces a newly disclosed SQL injection vulnerability (CVE-2026-3747) in itsourcecode University Management System with a Medium CVSS score, but does not provide PoC, exploit, patch, or active exploitation details.
0000031
166 followersView on X
RedPacket Security@RedPacketSec215d
General
CVE Alert: CVE-2026-3747 - itsourcecode - University Management System - https://www.redpacketsecurity.com/cve-alert-cve-2026-3747-itsourcecode-university-management-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3747 #itsourcecode #university-management-system
Post summary
This post announces a CVE alert for CVE-2026-3747 affecting the University Management System without providing technical, exploit, or mitigation details.
00000101
3.5K followersView on X
CVE@CVEnew215d
General
CVE-2026-3747 A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such … https://www.cve.org/CVERecord?id=CVE-2026-3747
Post summary
The post references CVE-2026-3747 for a University Management System but provides no technical details, PoC, or evidence of exploitation.
0000084
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds215d
Disclosure
CVE-2026-3747 SQL Injection in itsourcecode University Management System 1.0 via /add_result.php https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3747
Post summary
Vulnerability CVE-2026-3747 is a SQL injection in University Management System 1.0 via the /add_result.php endpoint. No proof of concept, exploit, patch, or active exploitation details are provided.
0000048
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	angeljudesuarez	university_management_system	1.0	-	-

Explore more

Back to dashboard angeljudesuarez CVEs university_management_system vulnerabilities

What researchers are saying

CVE-2026-3747

CRAC Learning - Tech@cracbotDisclosure

The tweet merely announces CVE-2026-3747, giving its CVSS score and affected software, without mentioning exploitation, PoC, patches, or false‑positive claims.

CRAC Learning - Tech@cracbotDisclosure

The tweet briefly announces CVE-2026-3747, citing its CVSS score and affected product, but provides no PoC, exploit detail, patch, or evidence of active exploitation.

DailyCVE@dailycveDisclosure

The post announces a newly disclosed SQL injection vulnerability (CVE-2026-3747) in itsourcecode University Management System with a Medium CVSS score, but does not provide PoC, exploit, patch, or active exploitation details.

RedPacket Security@RedPacketSecGeneral

This post announces a CVE alert for CVE-2026-3747 affecting the University Management System without providing technical, exploit, or mitigation details.

CVE@CVEnewGeneral

The post references CVE-2026-3747 for a University Management System but provides no technical details, PoC, or evidence of exploitation.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

Vulnerability CVE-2026-3747 is a SQL injection in University Management System 1.0 via the /add_result.php endpoint. No proof of concept, exploit, patch, or active exploitation details are provided.