CVE-2026-105254 LOW 2.1
Published: 2026-10-05 09:17:11 UTC · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Categories: Web servers & CMS
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Weakness: CWE-74, CWE-89