Itsourcecode · Itsourcecode Student Information System · CVE-2025-13581
**Name of the Vulnerable Software and Affected Versions**
itsourcecode Student Information System version 1.0
**Description**
A flaw exists in itsourcecode Student Information System that allows for remote manipulation of the `schedule id` argument within the /schedule edit1.php file, leading to a SQL injection condition. The exploit is publicly available.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.