CVE-2026-3261 - Vulnerability Analysis

Overview

itsourcecode School Management System 1.0 contains a SQL injection caused by manipulation of the "ID" argument in /settings/index.php Setting Handler, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version.

References

• https://vuldb.com/?submit.749364
• https://github.com/Ning-BJ/cve/issues/1
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.347984
• https://vuldb.com/?id.347984

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner