An unauthenticated SQL injection vulnerability in the Intern Membership Management System 1.0 allows remote attackers to bypass login authentication and potentially access sensitive database information.

The application is vulnerable to SQL injection via the student_login.php endpoint. By manipulating the user_name POST parameter, an unauthenticated attacker can inject arbitrary SQL commands to bypass authentication logic entirely.

Successful exploitation of this vulnerability allows unauthorized access to the system, potentially exposing sensitive intern membership data. With a CVSS score of 7.3, this high-severity flaw poses a significant risk to data confidentiality and integrity, as the lack of input sanitization enables attackers to bypass all access controls.

Immediate Action: As no official patch is currently available, administrators should restrict network access to the login page and consider implementing a Web Application Firewall (WAF) to filter malicious SQL injection patterns in POST requests.

Proactive Monitoring: Review web server and application access logs for suspicious POST requests to student_login.php, specifically monitoring for unusual characters in input fields such as single quotes or SQL keywords.

Compensating Controls: Deploy a WAF with rules configured to block common SQL injection payloads and limit the rate of login attempts to mitigate automated exploitation efforts.

Public Exploit Available: Yes, a functional proof-of-concept exploit is available via the researcher's published advisory on GitHub.

Due to the ease of exploitation and the critical nature of an authentication bypass, organizations using this software must treat this as a high-priority risk. Until a vendor-supplied patch is released, ensure that the application is isolated from public networks and that strict input validation is enforced at the application or WAF level to prevent unauthorized access.