PT-2026-28207 · Itsourcecode · Online Enrollment System

Sgwt · Published 2026-03-26 · Updated 2026-03-26 · CVE-2026-4842

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-4842

Affected Products

Online Enrollment System

References · 6

• 🔥 https://github.com/dsdsadawada/CVE1/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4842 · Security Note
• https://itsourcecode.com · Note
• https://vuldb.com/?id.353148 · Note
• https://vuldb.com/?submit.776132 · Note
• https://vuldb.com/?ctiid.353148 · Note