CVE-2026-105183
HighCVSS 7.3Summary
A weakness was identified in itsourcecode Online Admission System 1.0 affecting an unknown function of /admin/confirm.php. Manipulating the schedid argument causes SQL injection, and the attack can be initiated remotely. The exploit is publicly available and may be used for attacks.
Risk Assessment
A remote attacker can execute arbitrary SQL queries, potentially leaking or modifying data. The public availability of the exploit increases the risk of rapid attack.
Recommendation
Immediately implement parameterized queries and validate the schedid argument in /admin/confirm.php, and restrict access to the administrative panel.
Other vulnerabilities in Online Admission System
See all- CVE-2026-105187Medium
SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file /admin/key.php, where manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit is public.
- CVE-2026-105186Medium
SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file /new.php, where manipulation of the schedid argument leads to SQL injection. The attack can be executed remotely, and the exploit is public.
- CVE-2026-105185High
A vulnerability was detected in itsourcecode Online Admission System 1.0 affecting an unknown function of /admin/examinee.php. Manipulating the ID argument results in SQL injection, and the attack can be initiated remotely. The exploit is now public and may be used.
- CVE-2026-105184High
A security vulnerability was detected in itsourcecode Online Admission System 1.0 affecting an unknown function of /admin/creteria.php. Manipulating the ID argument leads to SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.
- CVE-2026-105181Medium
SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file register1.php, where manipulation of the fname argument leads to SQL injection. The attack can be executed remotely, and the exploit is public.
- CVE-2026-105172High
SQL injection vulnerability in itsourcecode Online Admission System 1.0. Affects the file /login1.php, where manipulation of the User argument leads to SQL injection. The attack can be initiated remotely, and the exploit is public.
Original NVD description (English source)
A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS