CVE-2026-36233: SQL Injection
A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for appropriate cleaning or validation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-36233?
CVE-2026-36233 is considered a critical vulnerability due to its potential for SQL injection, which can lead to unauthorized access to the database.
How do I fix CVE-2026-36233?
To fix CVE-2026-36233, sanitize user input for the 'subjcode' parameter and use prepared statements in the SQL queries.
What systems are affected by CVE-2026-36233?
CVE-2026-36233 affects version 1.0 of the itsourcecode Online Student Enrollment System.
What type of vulnerability is CVE-2026-36233?
CVE-2026-36233 is a SQL injection vulnerability, allowing attackers to execute arbitrary SQL queries.
Can CVE-2026-36233 lead to data breaches?
Yes, CVE-2026-36233 can lead to data breaches, as attackers could potentially extract sensitive information from the database.