CVE-2026-1176: itsourcecode School Management System index.php sql injection
A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1176?
CVE-2026-1176 has been classified as a high severity SQL injection vulnerability.
How do I fix CVE-2026-1176?
To fix CVE-2026-1176, ensure that all inputs are properly sanitized and parameterized queries are used in the affected application.
Which software versions are affected by CVE-2026-1176?
CVE-2026-1176 affects the itsourcecode School Management System version 1.0.
What type of vulnerability is CVE-2026-1176?
CVE-2026-1176 is an SQL injection vulnerability that allows attackers to manipulate database queries.
Where is the vulnerability located in CVE-2026-1176?
The CVE-2026-1176 vulnerability is located in the file /subject/index.php of the itsourcecode School Management System.