Findings

CVE-2026-36234

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

Published Apr 10, 2026 · updated Jun 17, 2026 · itsourcecode online student enrollment system

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 10, 2026 · NIST NVD

    Detected

    itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

  2. Jun 17, 2026 · NIST NVD

    Updated

    itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

Affected

  • cpe itsourcecode/online student enrollment system1.0

Sources

  • CVE.orgVulnerability recordCVE-2026-36234

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-36234

    itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

    nvd.nist.gov

References