← Database

CVE-2026-36234

CRITICAL CVSS: 9.8 Published: 2026-04-10 Modified: 2026-06-17

Description

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

Affected Platforms

Itsourcecode Online Student Enrollment System

Weakness Type

CWE-89

References