Executive brief
A vulnerability exists in the Assessment Management system, a tool used for managing academic evaluations and marking schemes. An attacker can exploit this flaw to interfere with the underlying database, potentially leading to the unauthorized viewing or modification of sensitive student and assessment data. This could result in data breaches or the corruption of academic records.
Technical details
A SQL injection vulnerability exists in the Assessment Management System 1.0 within the /lecturer/marking-scheme.php component. The application fails to properly sanitize or parameterize the 'smarksrange[]' input before concatenating it into an SQL INSERT statement. A remote attacker with lecturer-level privileges can provide a malicious payload that triggers an error-based SQL injection. Because the application returns raw database errors using mysqli_error(), an attacker can extract sensitive information from the database by observing the error responses. A public exploit demonstrating this behavior via the extractvalue() function is available.
Affected products
- code-projects Assessment Management 1.0
Timeline
- 2026-07-04: disclosed
- 2026-07-04: advisory