Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

itsourcecode sanitize or validate this input 1.0: Unsanitized Input Leads to SQL Injection

CVE-2026-4614
Summary

The itsourcecode software has a weakness in how it handles input from users. This makes it possible for hackers to inject malicious code into the system, potentially allowing them to access sensitive data or take control of the system. To protect the system, it's essential to update to the latest version of itsourcecode or apply the recommended security patch.

Original title
A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. Th...
Original description
A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. This manipulation of the argument subject_code causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
nvd CVSS2.0 6.5
nvd CVSS3.1 6.3
nvd CVSS4.0 5.3
Vulnerability type
CWE-74 Injection
CWE-89 SQL Injection
Published: 24 Mar 2026 · Updated: 24 Mar 2026 · First seen: 24 Mar 2026