CVE-2026-2090

5.5 mediumEPSS 0.4%

Medium (5.5) in janobe online class record system. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2026-02-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

janobe:online_class_record_system

References

https://github.com/xiaoccm07/cve/issues/3
https://vuldb.com/?ctiid.344657
https://vuldb.com/?id.344657
https://vuldb.com/?submit.746551
https://www.sourcecodester.com/

Check your stack JSON