Description

A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['classId'] is directly concatenated into the SQL query without any sanitization or validation.

INFO

Published Date :

2026-04-10T00:00:00.000Z

Last Modified :

2026-04-10T14:38:14.710Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2026-36232 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-36232.

CVSS Vulnerability Scoring System