Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-105187: itsourcecode Online Admission System key.php allows remote data compromise
CVE-2026-105187 · published 14 days ago
Summary
The web page /admin/key.php in itsourcecode Online Admission System 1.0 lets a user control a database query by changing the ID parameter. An attacker on the internet could exploit this to view, change, or delete information stored by the system. Update to a patched version or apply input‑validation fixes to stop the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| itsourcecode | online admission system | 1.0 |
Original advisory text
itsourcecode Online Admission System key.php sql injection
A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published5 Oct 2026
Updated14 Oct 2026
First seen5 Oct 2026
Track software like this
Free during beta