CVE-2026-4842

Description

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. VulDB is the best source for vulnerability data and more expert information about this specific topic.

References

https://vuldb.com/?submit.776132

https://vuldb.com/?id.353148

https://vuldb.com/?ctiid.353148

https://itsourcecode.com/

https://github.com/dsdsadawada/CVE1/issues/4

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS