A vulnerability was found in itsourcecode College Management System 1.0. It has been declared as critical. The impacted element is an unknown function of the file /admin/time-table.php. Such manipulation of the argument course_code leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-4241. The attack can be launched remotely. Moreover, an exploit is present.