Executive brief
The Student Details Management System, a web application for managing student records, contains a security flaw that allows unauthorized individuals to access its database. By sending a specially crafted request to the student search page, an attacker can bypass security controls to view, modify, or delete sensitive information. This could lead to a total compromise of student data and administrative credentials.
Technical details
A SQL injection vulnerability exists in code-projects Student Details Management System 1.0 within the /SMS/index.php file. The application fails to sanitize the 'roll' (and 'standard') POST parameters before concatenating them into a raw SQL query used for student lookups. An unauthenticated remote attacker can exploit this by submitting crafted SQL syntax to break out of the query context. This allows for UNION-based data extraction, enabling the attacker to dump the entire database, including user credentials and sensitive student records. No patches are currently available for this open-source project.
Affected products
- code-projects Student Details Management System 1.0
Timeline
- 2026-05-30: disclosed: Public exploit and vulnerability details released.
- 2026-05-30: advisory