CVE-2026-4842 PUBLISHED

itsourcecode Online Enrollment System Parameter index.php sql injection

Assigner: VulDB
Reserved: 25.03.2026 Published: 26.03.2026 Updated: 26.03.2026

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 6.9

Product Status

Vendor itsourcecode
Product Online Enrollment System
Versions
  • Version 1.0 is affected

Credits

  • sgwt (VulDB User) reporter

References

Problem Types

  • SQL Injection CWE
  • Injection CWE