An unauthenticated SQL injection vulnerability in the itsourcecode Student Management System 1.0 allows remote attackers to execute arbitrary database queries, posing a critical risk to data integrity and system availability.

The application fails to properly sanitize user input provided to the id parameter in the /addrecord.php file, resulting in a classic SQL injection vulnerability. This flaw can be exploited by an unauthenticated attacker to manipulate backend database queries.

Successful exploitation of this vulnerability grants an attacker the ability to perform unauthorized database operations, including data exfiltration, modification, or deletion. Given the CVSS score of 7.3, this represents a significant risk to the confidentiality and integrity of student records managed by the system. Failure to address this could lead to major data breaches and potential regulatory non-compliance.

Immediate Action: As no official vendor patch is currently available, administrators should restrict access to the /addrecord.php endpoint via network-level controls or web server configurations until a secure update is released.

Proactive Monitoring: Review web server access logs for anomalous GET requests targeting addrecord.php, specifically looking for payloads containing SQL syntax characters such as single quotes, UNION statements, or sleep commands.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the id parameter.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the GitHub issue referenced by the researcher.

The presence of a functional proof-of-concept necessitates immediate defensive action. Administrators should prioritize isolating the vulnerable Student Management System from public-facing networks and implement strict input validation or WAF-based filtering to prevent exploitation while awaiting a formal security update from the vendor.