Windhxy

**Name of the Vulnerable Software and Affected Versions** itsourcecode Student Information Management System version 1.0 **Description** A vulnerability exists in itsourcecode Student Information Management System version 1.0. The issue is a SQL injection affecting an unknown function within the `/admin/modules/class/index.php` file. The `classId` argument can be manipulated to trigger the injection. This manipulation can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** As a temporary workaround, consider restricting access to the `/admin/modules/class/index.php` file until a fix is available.