A vulnerability, which was classified as critical, was found in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/user/controller.php. The manipulation of the argument ID results in sql injection.
This vulnerability is reported as CVE-2026-2190. The attack can be launched remotely. Moreover, an exploit is present.
