CVE-2026-104606: itsourcecode Online Admission System Project confirm.php sql injection
Published Oct 2, 2026
·Updated
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
1 affected component
itsourcecode Online Admission System Project=1.0
Event History
Oct 2, 2026
CVE Published
via MITRE·10:30 AM
Data Sourced
via MITRE·10:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker can target the affected application remotely, but must have low-level privileges. No user interaction is required.
2
What input is vulnerable?
The SQL injection is triggered by manipulating the ID argument handled by confirm.php. The specific affected function is not identified in the available information.
3
Is public exploit code available?
Yes. The exploit has been publicly released and may be used in attacks.