SQL Injection Vulnerability in itsourcecode Online Student Enrollment System
CVE-2026-36233

Currently unrated

Key Information:

Vendor: itsourcecode
Status: Online Student Enrollment System
Vendor: CVE Published:; 10 April 2026

🔔 Create itsourcecode Vulnerability Alert

What is CVE-2026-36233?

A SQL injection vulnerability exists in the assignInstructorSubjects.php file of the itsourcecode Online Student Enrollment System version 1.0. This flaw allows attackers to inject malicious SQL code through the 'subjcode' parameter, which is directly used in SQL queries without proper input validation or sanitization. This could potentially lead to unauthorized access to sensitive data or manipulation of the database.

References

https://github.com/Amorsec/CVE-PHP/blob/main/itsourcecode...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 10, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-36233 Data

JSON