CVE-2026-2018

CRITICAL 9.8CVE-2026-2018 · Published 06/02/2026 · updated 17/06/2026

Package	Affected versions	Patched versions
school management system itsourcecode	`= 1.0`	No fix yet

Description

A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/settings/controller.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

References

ltranquility/CVE · Exploit
itsourcecode.com · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free