SQL Injection Vulnerability in itsourcecode Online Student Enrollment System
CVE-2026-36235

Currently unrated

Key Information:

Vendor: itsourcecode
Status: Online Student Enrollment System
Vendor: CVE Published:; 10 April 2026

🔔 Create itsourcecode Vulnerability Alert

What is CVE-2026-36235?

A SQL injection vulnerability exists in the scheduleSubList.php file of the itsourcecode Online Student Enrollment System v1.0, where the 'subjcode' parameter is directly passed into the SQL query. This practice exposes the application to injection attacks due to the lack of input sanitization and validation mechanisms, potentially allowing an attacker to manipulate database queries and access unauthorized data.

References

https://github.com/Amorsec/CVE-PHP/blob/main/itsourcecode...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 10, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-36235 Data

JSON