CVE-2026-2014: itsourcecode Student Management System index.php sql injection
A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2014?
CVE-2026-2014 is classified as a high-severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2026-2014?
To fix CVE-2026-2014, validate and sanitize all user inputs in the affected index.php file to prevent SQL injection.
Who is affected by CVE-2026-2014?
Anyone using itsourcecode Student Management System version 1.0 is affected by CVE-2026-2014.
What type of vulnerability is CVE-2026-2014?
CVE-2026-2014 is an SQL injection vulnerability that allows attackers to manipulate database queries.
Can CVE-2026-2014 be exploited remotely?
Yes, CVE-2026-2014 can be exploited remotely, allowing attackers to execute harmful SQL commands.