Is CVE-2026-105253 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-105253 being exploited in the wild.

How severe is CVE-2026-105253?

High severity, with a CVSS score of 7.3, published 5 October 2026.

Which products and versions are affected?

Itsourcecode Online Admission System 1.0.

How is CVE-2026-105253 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-105253?

Check whether you run Itsourcecode Online Admission System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-105253: itsourcecode Online Admission System SQL injection in login

CVE-2026-105253 · Severity: high · CVSS 7.3 · Published 2026-10-05

The itsourcecode Online Admission System is a PHP-based web application used for student admissions. A SQL injection vulnerability in the admin login page allows attackers to inject malicious database commands through the user parameter, potentially exposing or modifying sensitive student and institutional data without authentication.

Technologies: Itsourcecode Online Admission System. Vendors: Itsourcecode.

Quick answers

Is CVE-2026-105253 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-105253 being exploited in the wild.
How severe is CVE-2026-105253?: High severity, with a CVSS score of 7.3, published 5 October 2026.
Which products and versions are affected?: Itsourcecode Online Admission System 1.0.
Is there a fix for CVE-2026-105253?: No fixed version is recorded yet. Use prepared statements and parameterized queries to prevent SQL injection. Implement strict input validation to ensure the user parameter conforms to expected format. Restrict database account permissions to the minimum necessary for application operation.</anigation> <parameter name="timeline">[{"kind": "disclosed", "at": "2026-09-14"}, {"kind": "advisory", "at": "2026-10-05"}] If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-105253 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-105253?: Check whether you run Itsourcecode Online Admission System at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Use prepared statements and parameterized queries to prevent SQL injection. Implement strict input validation to ensure the user parameter conforms to expected format. Restrict database account permissions to the minimum necessary for application operation.</anigation> <parameter name="timeline">[{"kind": "disclosed", "at": "2026-09-14"}, {"kind": "advisory", "at": "2026-10-05"}]

Technical details

A SQL injection vulnerability exists in /admin/login1.php where the 'user' parameter is not properly sanitized before being used in SQL queries. The vulnerability is remotely exploitable without authentication and allows attackers to manipulate SQL queries to extract or modify database contents. No patch has been indicated as available.

Affected products

itsourcecode Online Admission System 1.0

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.