Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:online_enrollment_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductOnline Enrollment System (a6e3c84c-6b3c-566d-a987-903a168d011e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5534 vulnerable 2026-06-08 08:07:03.803487 itsourcecode Online Enrollment System Parameter index.php sql injection
HIGH (7.3)
A vulnerability was identified in itsourcecode Online Enrollment System 1.0. This affects an unknown function of the file /sms/user/index.php?view=edit&id=10 of the component Parameter Handler. Such manipulation of the argument USERID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2026-04-05T01:45:10.357Z
Updated: 2026-04-06T19:12:16.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5334 vulnerable 2026-06-08 08:07:03.575230 itsourcecode Online Enrollment System Parameter index.php sql injection
HIGH (7.3)
A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-04-02T13:45:11.444Z
Updated: 2026-04-02T16:23:27.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4842 vulnerable 2026-06-08 08:07:02.516947 itsourcecode Online Enrollment System Parameter index.php sql injection
HIGH (7.3)
A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-03-26T04:50:12.056Z
Updated: 2026-03-27T22:24:23.182Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4632 vulnerable 2026-06-08 08:05:13.628237 itsourcecode Online Enrollment System Parameter index.php sql injection
HIGH (7.3)
A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-24T04:09:42.814Z
Updated: 2026-03-24T15:12:24.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4236 vulnerable 2026-06-08 08:05:13.056601 itsourcecode Online Enrollment System index.php sql injection
HIGH (7.3)
A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=add. Such manipulation of the argument txtsearch/deptname/name leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2026-03-16T11:32:09.033Z
Updated: 2026-03-16T18:55:03.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4235 vulnerable 2026-06-08 08:05:13.056194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.