CVE-2026-1545: itsourcecode School Management System index.php sql injection
A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1545?
CVE-2026-1545 has a high severity due to the potential for SQL injection, which can lead to unauthorized access and manipulation of the database.
How do I fix CVE-2026-1545?
To fix CVE-2026-1545, it is recommended to validate and sanitize input parameters before using them in SQL queries.
What systems are affected by CVE-2026-1545?
CVE-2026-1545 affects itsourcecode School Management System version 1.0 specifically in the index.php file.
What type of vulnerability is CVE-2026-1545?
CVE-2026-1545 is classified as an SQL injection vulnerability, affecting the way user input is handled in database commands.
Can CVE-2026-1545 be exploited remotely?
Yes, CVE-2026-1545 can be exploited remotely by an attacker who manipulates the ID parameter in a request.