PT-2026-27307 · Sourcecodester · The Online Admission System

Weqi · Published 2026-03-24 · Updated 2026-03-24 · CVE-2026-4625

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4625

Affected Products

The Online Admission System

References · 6

• 🔥 https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_7.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4625 · Security Note
• https://vuldb.com/?ctiid.352493 · Note
• https://vuldb.com/?submit.775788 · Note
• https://vuldb.com/?id.352493 · Note
• https://sourcecodester.com · Note