CVE-2026-108928: itsourcecode Online Admission System sum.php sql injection
Published Oct 12, 2026
·Updated
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
1 affected component
itsourcecode Online Admission System=1.0
Event History
Oct 12, 2026
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker with low privileges can exploit the SQL injection through the ID argument handled by /admin/sum.php. No user interaction is required.
2
Is exploit code available?
Yes. The exploit has been publicly disclosed and may be used, which increases the likelihood of attempted exploitation.
3
What is known about affected versions?
The vulnerability is reported in itsourcecode Online Admission System 1.0. The available information does not identify whether other versions are affected.