Product by ItsourceCode
School Management System
17 known vulnerabilities in School Management System (ItsourceCode), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
15
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2026-86268 | itsourcecode School Management System User_Login.php sql injection | 7.3 | |
| Critical | CVE-2026-3261 | itsourcecode School Management System Setting index.php sql injection | 7.3 | |
| Critical | CVE-2026-1701 | itsourcecode School Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-2014 | itsourcecode Student Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-2013 | itsourcecode Student Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-2190 | itsourcecode School Management System controller.php sql injection | 7.3 | |
| Critical | CVE-2026-2189 | itsourcecode School Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-1545 | itsourcecode School Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-1590 | itsourcecode School Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-1589 | itsourcecode School Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-1176 | itsourcecode School Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-2018 | itsourcecode School Management System controller.php sql injection | 7.3 | |
| Critical | CVE-2026-2012 | itsourcecode Student Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-2011 | itsourcecode Student Management System controller.php sql injection | 7.3 | |
| Critical | CVE-2026-2073 | itsourcecode School Management System index.php sql injection | 7.3 | |
| Critical | CVE-2026-0544 | itsourcecode School Management System index.php sql injection | 7.3 | |
| High | CVE-2026-1551 | itsourcecode School Management System controller.php sql injection | 6.3 |