CVE-2026-36234: SQL Injection
Published Apr 10, 2026
·Updated
itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.
Affected Software
2 affected components
itsourcecode Online Student Enrollment System=1.0
itsourcecode Online Student Enrollment System=1.0
Event History
Apr 10, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-36234?
CVE-2026-36234 is classified as a high severity vulnerability due to its potential for SQL Injection exploitation.
2
How do I fix CVE-2026-36234?
To fix CVE-2026-36234, sanitize and validate the 'coursename' parameter input in the newCourse.php file to prevent SQL Injection.
3
What impact does CVE-2026-36234 have on my system?
CVE-2026-36234 could allow an attacker to manipulate database queries, leading to unauthorized data access or modification.
4
Which version of Online Student Enrollment System is affected by CVE-2026-36234?
CVE-2026-36234 affects version 1.0 of the itsourcecode Online Student Enrollment System.
5
Is CVE-2026-36234 easy to exploit?
Yes, CVE-2026-36234 can be easily exploited by inserting malicious SQL code into the affected 'coursename' parameter.