CVE-2026-2090

CRITICAL 9.8CVE-2026-2090 · Published 07/02/2026 · updated 17/06/2026

Package	Affected versions	Patched versions
online class record system janobe	`= 1.0`	No fix yet

Description

A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

References

xiaoccm07/cve · Broken Link
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
sourcecodester.com · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free