CVE-2026-1589: itsourcecode School Management System index.php sql injection
A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1589?
The severity of CVE-2026-1589 is critical due to its potential for SQL injection, which can lead to unauthorized database access.
How do I fix CVE-2026-1589?
To fix CVE-2026-1589, validate and sanitize all user inputs in the /ramonsys/inquiry/index.php file to prevent SQL injection.
What systems are affected by CVE-2026-1589?
CVE-2026-1589 affects the itsourcecode School Management System version 1.0.
What is SQL injection in the context of CVE-2026-1589?
In the context of CVE-2026-1589, SQL injection allows attackers to manipulate queries through the txtsearch argument, compromising the database.
How can I identify if my application is vulnerable to CVE-2026-1589?
You can identify if your application is vulnerable to CVE-2026-1589 by testing the /ramonsys/inquiry/index.php endpoint with malicious input to see if it affects the database.