A vulnerability described as critical has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection.
This vulnerability is known as CVE-2026-0544. It is possible to launch the attack remotely. Furthermore, an exploit is available.