CVE-2026-4625

5.5 mediumEPSS 0.3%

Medium (5.5). EPSS 0.3% chance of exploitation in the next 30 days.

A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2026-03-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_7.md
https://vuldb.com/?ctiid.352493
https://vuldb.com/?id.352493
https://vuldb.com/?submit.775788
https://www.sourcecodester.com/

Check your stack JSON