A critical SQL injection vulnerability in code-projects Intern Membership Management System 1.0 allows for remote unauthorized database interaction.

This is a SQL injection vulnerability (CWE-89) located in the /admin/edit_student_query.php file. The application fails to properly sanitize the ID argument, allowing an unauthenticated remote attacker to manipulate database queries.

Successful exploitation allows an attacker to manipulate backend database queries, potentially leading to unauthorized data disclosure, modification, or deletion. With a CVSS score of 7.3, this high-severity flaw poses a significant risk to the confidentiality and integrity of student membership data managed by the system.

Immediate Action: Since no official patch is currently available, administrators should restrict access to the /admin/ directory using network-level controls or web server authentication until the vendor provides a security update.

Proactive Monitoring: Monitor server access logs for anomalous GET or POST requests directed at /admin/edit_student_query.php, specifically looking for SQL syntax patterns in the ID parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting URL parameters.

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the referenced technical write-up from Yuque.

Given the availability of a public proof-of-concept and the lack of a vendor-supplied patch, this vulnerability presents an immediate risk to the application. Security teams must prioritize isolating the affected component from the public internet and implementing strict access controls immediately to prevent unauthorized database access.