CVE-2026-5534
HIGHitsourcecode Online Enrollment System Parameter index.php sql injection
Title source: cnaDescription
A vulnerability was identified in itsourcecode Online Enrollment System 1.0. This affects an unknown function of the file /sms/user/index.php?view=edit&id=10 of the component Parameter Handler. Such manipulation of the argument USERID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Scores
CVSS v3
7.3
EPSS
0.0004
EPSS Percentile
12.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-74
CWE-89
Status
published
Products (1)
itsourcecode/Online Enrollment System
1.0
Published
Apr 05, 2026
Tracked Since
Apr 05, 2026