CVE-2026-36232: SQL Injection
Published Apr 10, 2026
·Updated
A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $GET['classId'] is directly concatenated into the SQL query without any sanitization or validation.
Affected Software
2 affected components
itsourcecode Online Student Enrollment System=1.0
itsourcecode Online Student Enrollment System=1.0
Event History
Apr 10, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-36232?
The severity of CVE-2026-36232 is classified as critical with a CVSS score of 9.8.
2
What type of vulnerability is CVE-2026-36232?
CVE-2026-36232 is a SQL injection vulnerability affecting the itsourcecode Online Student Enrollment System.
3
How do I fix CVE-2026-36232?
To fix CVE-2026-36232, sanitize and validate the 'classId' parameter before using it in SQL queries.
4
Which file is affected in CVE-2026-36232?
CVE-2026-36232 affects the instructorClasses.php file in the itsourcecode Online Student Enrollment System.
5
When was CVE-2026-36232 published?
CVE-2026-36232 was published on April 10, 2026.