SQL Injection Vulnerability in itsourcecode Online Student Enrollment System
CVE-2026-36232

Currently unrated

Key Information:

Vendor: itsourcecode
Status: Online Student Enrollment System
Vendor: CVE Published:; 10 April 2026

🔔 Create itsourcecode Vulnerability Alert

What is CVE-2026-36232?

An SQL injection vulnerability exists in the instructorClasses.php file of itsourcecode's Online Student Enrollment System version 1.0 due to improper handling of the 'classId' parameter. The application directly concatenates user input from the 'classId' parameter into SQL queries, exposing it to potential malicious SQL code execution. This flaw, resulting from a lack of input sanitization or validation, could allow an attacker to manipulate database queries and gain unauthorized access to sensitive data.

References

https://github.com/Amorsec/CVE-PHP/blob/main/itsourcecode...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 10, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-36232 Data

JSON