The vulnerability CVE-2026-9383 affects itsourcecode Electronic Judging System 1.0 and involves SQL injection via the Username parameter in the /intrams/admin/login.php file. This allows an unauthenticated remote attacker to inject SQL commands due to insufficient input validation or sanitization. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. The vulnerability is publicly disclosed but no official fix or patch is currently available.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The impact is rated medium severity with limited confidentiality, integrity, and availability impacts. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing input validation or web application firewall rules to detect and block SQL injection attempts targeting the Username parameter in /intrams/admin/login.php. Monitor for updates from the vendor regarding patches or official mitigations.