A vulnerability categorized as critical has been discovered in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newrecord.php. Executing manipulation of the argument ID can lead to sql injection.

This vulnerability is tracked as CVE-2025-14257. The attack can be launched remotely. Moreover, an exploit is present.