A vulnerability categorized as critical has been discovered in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument course_code can lead to sql injection.
This vulnerability is handled as CVE-2026-3149. The attack can be executed remotely. Additionally, an exploit exists.
