CVE-2026-4235: itsourcecode Online Enrollment System login.php sql injection
A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argument useremail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4235?
CVE-2026-4235 has a high severity due to the potential for SQL injection attacks which can compromise database security.
How do I fix CVE-2026-4235?
To fix CVE-2026-4235, sanitize and validate all user inputs, especially in the user_email parameter, to prevent SQL injection.
What systems are affected by CVE-2026-4235?
CVE-2026-4235 affects itsourcecode Online Enrollment System version 1.0, specifically the login.php file.
What is SQL injection as related to CVE-2026-4235?
SQL injection in the context of CVE-2026-4235 refers to manipulating SQL queries through the user_email parameter to gain unauthorized access to the database.
How can I identify if my system is vulnerable to CVE-2026-4235?
You can identify vulnerability to CVE-2026-4235 by testing the login functionality with unsanitized inputs and observing if SQL errors occur.