CVE-2025-14335 | itsourcecode Student Management System 1.0 /new_school_year.php sy sql injection

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /new_school_year.php. The manipulation of the argument sy leads to sql injection.

This vulnerability is traded as CVE-2025-14335. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.