A vulnerability marked as critical has been reported in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Performing manipulation of the argument ID results in sql injection.
This vulnerability is reported as CVE-2025-14588. The attack is possible to be carried out remotely. Moreover, an exploit is present.