CVE-2026-108928
MediumCVSS 6.3Summary
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Risk Assessment
An organization using this system may be exposed to SQL injection, which can lead to leakage, modification, or deletion of database data. This can result in a breach of confidentiality and integrity of admission data.
Recommendation
Upgrade or patch itsourcecode Online Admission System if a fix is available, or implement input validation and query parameterization. Restrict access to /admin/sum.php and monitor for unusual database queries.
Other vulnerabilities in itsourcecode Online Admission System
See all- CVE-2026-105254Medium
A vulnerability was identified in itsourcecode Online Admission System 1.0. It impacts an unknown function in the file /admin/schoolyear.php. Manipulation of the sy argument leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.
- CVE-2026-104606Medium
A SQL injection vulnerability was discovered in itsourcecode Online Admission System 1.0 in the confirm.php file. Manipulation of the ID argument allows remote attacks. The exploit has been publicly released.
Original NVD description (English source)
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS