CVE-2026-4632: itsourcecode Online Enrollment System Parameter index.php sql injection
A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4632?
CVE-2026-4632 is classified as a high severity vulnerability due to the potential for SQL injection exploitation.
How do I fix CVE-2026-4632?
To fix CVE-2026-4632, ensure that all user inputs are properly sanitized and use parameterized queries to mitigate SQL injection risks.
What components are affected by CVE-2026-4632?
CVE-2026-4632 affects the parameter handler within the itsourcecode Online Enrollment System version 1.0.
What is SQL injection in relation to CVE-2026-4632?
SQL injection in CVE-2026-4632 refers to the manipulation of SQL queries through unsanitized input to gain unauthorized access to the database.
Can CVE-2026-4632 be exploited remotely?
Yes, CVE-2026-4632 can potentially be exploited remotely if an attacker can access the affected component of the Online Enrollment System.