CVE-2026-4235: falha de média gravidade em itsourcecode Online Enrollment System
itsourcecode Online Enrollment System login.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.3%
A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argument user_email causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Online Enrollment SystemCVEs relacionadas — itsourcecode Online Enrollment System
No mesmo produto, das mais perigosas para as menos.
CVE-2026-5334MEDIUMitsourcecode Online Enrollment System Parameter index.php sql injectionEPSS 0.4%CVE-2026-4842MEDIUMitsourcecode Online Enrollment System Parameter index.php sql injectionEPSS 0.3%CVE-2026-4236MEDIUMitsourcecode Online Enrollment System index.php sql injectionEPSS 0.3%CVE-2026-5534MEDIUMitsourcecode Online Enrollment System Parameter index.php sql injectionEPSS 0.3%CVE-2026-4632MEDIUMitsourcecode Online Enrollment System Parameter index.php sql injectionEPSS 0.3%