An unauthenticated SQL injection vulnerability in Mstfakts College-Management-System allows remote attackers to bypass security controls and exfiltrate sensitive data from the database.

This is a SQL injection vulnerability (CWE-89) located in the Front-end/university.php and Front-end/faculty.php files. The application fails to sanitize unauthenticated POST input in the book_name and book_author parameters before concatenating them into database queries, allowing an attacker to execute arbitrary SQL commands.

Successful exploitation allows an unauthenticated attacker to perform unauthorized queries against the backend database, leading to the full disclosure of sensitive records such as user identities, password hashes, and contact information. Given the CVSS score of 7.3, this vulnerability poses a significant risk to data confidentiality and integrity, potentially facilitating further account takeover attacks.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected PHP files at the web server level or disable the vulnerable book search feature entirely.

Proactive Monitoring: Review web server access logs for anomalous POST requests to university.php and faculty.php, specifically searching for SQL syntax keywords such as UNION, SELECT, or FROM.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns in incoming POST parameters.

Public Exploit Available: Yes, a published proof-of-concept exists in the vendor's own GitHub issue tracker (Issue #5).

Given the availability of a functional proof-of-concept and the lack of a vendor-provided security update, this vulnerability presents an immediate risk. Organizations utilizing Mstfakts College-Management-System must prioritize implementing manual input filtering or disabling the vulnerable search functionality to prevent unauthorized database access.