Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:online_student_enrollment_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductOnline Student Enrollment System (653ed563-14a7-53ea-84eb-e8b13a21495b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-36235 vulnerable 2026-06-08 07:59:14.253503 Details available
A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' parameter is directly embedded into the SQL query via string interpolation without any sanitization or validation.
Published: 2026-04-10T00:00:00.000Z
Updated: 2026-04-14T14:04:25.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-36234 vulnerable 2026-06-08 07:59:14.253261 Details available
itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.
Published: 2026-04-10T00:00:00.000Z
Updated: 2026-04-14T14:02:19.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-36233 vulnerable 2026-06-08 07:59:14.252882 Details available
A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for appropriate cleaning or validation.
Published: 2026-04-10T00:00:00.000Z
Updated: 2026-04-14T14:19:38.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-36232 vulnerable 2026-06-08 07:59:14.252527 Details available
A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['classId'] is directly concatenated into the SQL query without any sanitization or validation.
Published: 2026-04-10T00:00:00.000Z
Updated: 2026-04-14T14:14:30.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5397 vulnerable 2026-06-08 06:56:15.793098 itsourcecode Online Student Enrollment System instructorSubjects.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file instructorSubjects.php. The manipulation of the argument instructorId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266311.
Published: 2024-05-27T03:00:04.345Z
Updated: 2024-08-01T21:11:12.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5396 vulnerable 2026-06-08 06:56:15.792502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5395 vulnerable 2026-06-08 06:56:15.791947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5394 vulnerable 2026-06-08 06:56:15.791033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5393 vulnerable 2026-06-08 06:56:15.790234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5392 vulnerable 2026-06-08 06:56:15.787523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5391 vulnerable 2026-06-08 06:56:15.786742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5390 vulnerable 2026-06-08 06:56:15.785977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.