A vulnerability marked as critical has been reported in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-4842. The attack is possible to be carried out remotely. Moreover, an exploit is present.
