CVE-2026-2089 — SourceCodester Online Class Record System controller.php sql injection
A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manip…
Published: 2026-02-07 · CVSS: 6.9 · CVSS 4.0
A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7