CVE-2026-15672

Name of the Vulnerable Software and Affected Versions itsourcecode Electronic Judging System version 1.0

Description A SQL injection issue exists in the /intrams/admin/add judges.php endpoint. This occurs when the fname argument is manipulated, allowing a remote attacker to execute unauthorized database queries.

Recommendations Update itsourcecode Electronic Judging System to a version that fixes this issue. As a temporary mitigation, restrict access to the /intrams/admin/add judges.php endpoint or avoid using the fname parameter until a patch is applied.