Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-104606: itsourcecode Online Admission System may expose data via web
CVE-2026-104606 · published 17 days ago
Summary
The confirm.php page in the itsourcecode Online Admission System lets an attacker send specially crafted input in the ID field, causing the system to run unintended database commands. This can be done over the Internet and could let outsiders view, change, or delete applicant information. Apply any available updates from the vendor or have a developer add proper checks to ensure input is safe before it reaches the database.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| itsourcecode | online admission system project | 1.0 |
Original advisory text
itsourcecode Online Admission System Project confirm.php sql injection
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
2.1
Low
Type
CWE-89SQL Injection
CWE-74Injection
Timeline
Published2 Oct 2026
Updated15 Oct 2026
First seen2 Oct 2026
Track software like this
Free during beta