A vulnerability, which was classified as critical, has been found in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/report/index.php. The manipulation of the argument ay leads to sql injection.
This vulnerability is documented as CVE-2026-2189. The attack can be initiated remotely. Additionally, an exploit exists.
