A vulnerability categorized as critical has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection.
This vulnerability is handled as CVE-2026-1551. The attack can be executed remotely. Additionally, an exploit exists.
