A vulnerability classified as critical was found in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/user/index.php. Executing a manipulation of the argument ID can lead to sql injection.

This vulnerability appears as CVE-2026-2073. The attack may be performed from remote. In addition, an exploit is available.