CVE-2026-4632 | itsourcecode Online Enrollment System 1.0 Parameter index.php?view=add Name sql injection

A vulnerability was found in itsourcecode Online Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection.

This vulnerability appears as CVE-2026-4632. The attack may be performed from remote. In addition, an exploit is available.