CVE-2025-14967 | itsourcecode Student Management System 1.0 /candidates_report.php school_year sql injection

A vulnerability was found in itsourcecode Student Management System 1.0. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file /candidates_report.php. The manipulation of the argument school_year leads to sql injection.

This vulnerability is documented as CVE-2025-14967. The attack can be initiated remotely. Additionally, an exploit exists.