CVE-2026-105181: itsourcecode Online Admission System register1.php sql injection
Published Oct 5, 2026
·Updated
A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
1 affected component
itsourcecode Online Admission System=1.0
Event History
Oct 5, 2026
CVE Published
via MITRE·02:15 AM
Data Sourced
via MITRE·02:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 AM
DescriptionSeverityWeakness
Jan 10, 58730
Event
via NVD·01:05 PM
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attack can be performed remotely and requires low privileges. No user interaction is required.
2
Which input is vulnerable?
The SQL injection is associated with the fname argument processed by register1.php.
3
Is exploit code available?
Yes. A public exploit is available and may be used by attackers.