CVE-2026-36235: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' parameter is directly embedded into the SQL query via string interpolation without any sanitization or validation...

CVE-2026-36233: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for...

CVE-2026-36232: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $GET'classId' is directly concatenated into the SQL query without any sanitization or validation...

CVE-2024-5396

A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfaculty.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-5397

CVE-2024-5397 affects itsourcecode Online Student Enrollment System 1.0. The vulnerability resides in instructorSubjects.php where the attacker can manipulate the instructorId parameter to perform SQL injection. It is a remote vulnerability with publicly disclosed exploit information, indicating ...

CVE-2024-5394

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file newDept.php. The manipulation of the argument deptname leads to sql injection. The attack can be initiated remotely. The exploit ha...

CVE-2024-5393

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file listofcourse.php. The manipulation of the argument idno leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2024-5392

The CVE-2024-5392 entry concerns itsourcecode Online Student Enrollment System 1.0, where the file editSubject.php is affected. An attacker can manipulate the id parameter to trigger a SQL injection, allowing potentially unauthorized access to or modification of backend data. Multiple connected s...

CVE-2024-5391 itsourcecode Online Student Enrollment System listofsubject.php sql injection

A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql injection. The attack can be launched...

PT-2024-35982

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Student Enrollment System version 1.0 Description: A critical issue has been identified, affecting the file newDept.php. The manipulation of the deptname argument leads to SQL injection. This issue can be exploited remotel...

PT-2024-35972

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Student Enrollment System version 1.0 Description: A critical issue has been found in the itsourcecode Online Student Enrollment System, affecting an unknown functionality of the file listofsubject.php. The manipulation of...

PT-2024-35969

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Student Enrollment System version 1.0 Description: A critical issue was found in the itsourcecode Online Student Enrollment System. The problem is related to an unknown function in the file listofstudent.php, where the...

PT-2024-35986

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Student Enrollment System version 1.0 Description: A critical issue has been found in the itsourcecode Online Student Enrollment System, affecting an unknown function of the file newfaculty.php. The manipulation of the nam...

CVE-2024-5394: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file newDept.php. The manipulation of the argument deptname leads to sql injection. The attack can be initiated remotely. The exploit ha...

CVE-2024-5390: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file listofstudent.php. The manipulation of the argument lname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-5397: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file instructorSubjects.php. The manipulation of the argument instructorId leads to sql injection. The attack can be launched...

CVE-2024-5391: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql injection. The attack can be launched...

PT-2024-35988

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Student Enrollment System version 1.0 Description: A critical issue was found in the itsourcecode Online Student Enrollment System, affecting an unknown functionality of the file instructorSubjects.php. The manipulation of...

PT-2024-35977

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Student Enrollment System version 1.0 Description: A critical issue has been found in the itsourcecode Online Student Enrollment System, affecting the file listofcourse.php. The idno argument is vulnerable to SQL injection...

PT-2024-35975

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Student Enrollment System version 1.0 Description: A critical issue was found in the itsourcecode Online Student Enrollment System, affecting some unknown functionality of the file editSubject.php. The manipulation of the ...