A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['classId'] is directly concatenated into the SQL query without any sanitization or validation.
CVE-2026-36232
NONE
EPSS 0.04%
Updated Apr 10, 2026
PHP
CVE Details
CVE ID
CVE-2026-36232
Published Date
Apr 10, 2026
Vendor
PHP
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.04%
Likelihood of exploitation in next 30 days
Percentile:
11.4th percentile (higher than 11.4% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory