CVE-2024-58276: OBI08/ENROLLMENT System

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /get_subject.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can use UNION-based injection to extract sensitive information from the users table including usernames and passwords.

Affected products

• OBI08/ENROLLMENT System OBI08/ENROLLMENT System: version 1.0 only

Published 2025-12-04. Last modified 2026-09-26.