The School Log Management System 1.0 is vulnerable to a remote SQL injection attack, which could allow unauthenticated attackers to query or manipulate the underlying database.

This is a SQL injection vulnerability (CWE-89) triggered by improper input validation of the id_no parameter within the /admin/admin_class.php file. The vulnerability is remotely exploitable and does not require authentication.

Successful exploitation of this flaw allows an attacker to interact directly with the application database. This could lead to unauthorized data exposure, potential modification of records, or administrative bypass, severely compromising the integrity and confidentiality of student or system logs. With a CVSS score of 7.3, this represents a high-risk security gap that demands immediate attention.

Immediate Action: As no official patch is currently available, administrators should restrict network access to the /admin/admin_class.php endpoint and implement strict input validation for the id_no parameter.

Proactive Monitoring: Monitor database query logs for unusual syntax or patterns indicative of SQL injection attempts, specifically targeting the id_no argument.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block unauthorized requests containing suspicious SQL keywords or abnormal characters sent to the vulnerable administration file.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the linked GitHub repository.

The presence of a publicly disclosed proof-of-concept significantly elevates the risk of exploitation for this high-severity vulnerability. Given that an official patch is missing, organizations should prioritize isolating the affected application from public networks or implementing robust WAF filtering to prevent unauthorized database access.