A critical SQL injection vulnerability in the School Registration and Fee System allows unauthenticated remote attackers to compromise database integrity and confidentiality.

The application fails to properly sanitize user input in the category parameter within the /bilal/save_class.php file. This flaw allows an unauthenticated attacker to inject malicious SQL commands, leading to blind SQL injection.

Successful exploitation of this vulnerability grants an attacker the ability to bypass authentication, extract sensitive student or financial data, and potentially modify or delete database records. Given the CVSS score of 7.3, this represents a high risk to organizational data integrity and regulatory compliance. Prolonged exposure may lead to complete compromise of the application backend and associated business data.

Immediate Action: As no official patch is currently available from the vendor, administrators should restrict network access to the /bilal/save_class.php endpoint or disable the affected module entirely if it is not business critical.

Proactive Monitoring: Review web server access logs for anomalous POST requests to /bilal/save_class.php, specifically monitoring for SQL syntax patterns such as SLEEP or RLIKE.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block incoming HTTP requests containing SQL injection payloads targeting the category parameter.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the researcher's GitHub issue report.

Due to the presence of a published proof-of-concept and the ease of remote exploitation, this vulnerability poses a significant risk to your environment. Organizations utilizing this software must prioritize implementing defensive WAF rules immediately and seek to replace the software if the vendor fails to provide a secure, updated version.