CVE-2026-36232: A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment Syst

A SQL injection vulnerability (a type of attack where malicious SQL code is inserted through user input) was discovered in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The vulnerability occurs because the 'classId' parameter from user input is directly added into a SQL query without being cleaned or checked first, allowing attackers to manipulate database queries.