The Student Management System version 1.0 contains a critical SQL injection vulnerability that allows remote, unauthenticated attackers to manipulate database queries.

This is a SQL injection flaw (CWE-89) located in the edit_user.php file. An unauthenticated attacker can supply malicious input to the fname parameter to execute arbitrary SQL commands against the backend database.

The ability for an unauthenticated remote attacker to perform SQL injection poses a significant risk to data confidentiality and integrity. Successful exploitation could lead to unauthorized access to student records, potential modification of sensitive information, or exposure of database credentials. Given the CVSS score of 7.3, this represents a high-severity risk that could result in severe reputational damage and regulatory non-compliance.

Immediate Action: As no official patch is currently available, administrators should restrict access to the application by placing it behind a secure VPN or an authenticated proxy.

Proactive Monitoring: Review web server access logs for anomalous requests to /edit_user.php, particularly those containing SQL syntax characters such as single quotes, double dashes, or semicolon delimiters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules designed to detect and block SQL injection patterns targeting the fname parameter.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the referenced GitHub issue.

Given the public availability of proof-of-concept code and the lack of a vendor-supplied patch, this vulnerability presents an immediate risk to the environment. Organizations currently running the Student Management System 1.0 must prioritize isolating the affected component from the public internet. If the software is not mission-critical, consider deactivating the service until an official security update is released by the vendor.