CVE-2026-4632: falha de média gravidade em itsourcecode Online Enrollment System
itsourcecode Online Enrollment System Parameter index.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.3%
A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Online Enrollment SystemCVEs relacionadas — itsourcecode Online Enrollment System
No mesmo produto, das mais perigosas para as menos.
CVE-2026-5334MEDIUMitsourcecode Online Enrollment System Parameter index.php sql injectionEPSS 0.4%CVE-2026-4842MEDIUMitsourcecode Online Enrollment System Parameter index.php sql injectionEPSS 0.3%CVE-2026-4236MEDIUMitsourcecode Online Enrollment System index.php sql injectionEPSS 0.3%CVE-2026-4235MEDIUMitsourcecode Online Enrollment System login.php sql injectionEPSS 0.3%CVE-2026-5534MEDIUMitsourcecode Online Enrollment System Parameter index.php sql injectionEPSS 0.3%