CVE-2026-4632Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
Disclose: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

Disclose

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

RedPacket Security@RedPacketSec198d
Disclose
CVE Alert: CVE-2026-4632 - itsourcecode - Online Enrollment System - https://www.redpacketsecurity.com/cve-alert-cve-2026-4632-itsourcecode-online-enrollment-system/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-4632 #itsourcecode #online-enrollment-system
Post summary
The post announces a CVE (CVE‑2026‑4632) linked to itsourcecode's online enrollment system and directs readers to a separate site for details, but it does not provide PoC, exploit, patch, or technical information.
0000078
3.6K followersView on X
CVE@CVEnew198d
Disclosure
CVE-2026-4632 A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the com… https://www.cve.org/CVERecord?id=CVE-2026-4632
Post summary
The post announces CVE-2026-4632, a weakness in Online Enrollment System 1.0 affecting /sms/user/index.php?view=add, but provides no PoC, exploit, patch, or evidence of active use.
0000078
56.8K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds198d
Disclosure
CVE-2026-4632 SQL Injection in itsourcecode Online Enrollment System 1.0 via Parameter Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4632
Post summary
The post confirms a SQL Injection vulnerability (CVE-2026-4632) in itsourcecode Online Enrollment System 1.0, but contains no PoC, exploit code, patch, or evidence of active exploitation.
0000039
4.0K followersView on X

Explore more

Back to dashboard