PT-2026-6874 · Itsourcecode · School Management System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
itsourcecode School Management System version 1.0
Description
A flaw exists in itsourcecode School Management System 1.0 that allows for SQL injection. This occurs through manipulation of the
ID argument within the file '/ramonsys/user/index.php'. The attack can be carried out remotely. The exploit for this issue has been publicly disclosed.Recommendations
Apply a fix to the vulnerable file '/ramonsys/user/index.php' to prevent manipulation of the
ID argument.Exploit
Fix
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
School Management System