This vulnerability affects code-projects Student Details Management System 1.0. It is an SQL injection issue triggered by manipulating the 'roll' parameter in the /index.php file. The vulnerability allows remote attackers to inject SQL commands without authentication or user interaction. The CVSS 4.0 base score is 6.9 (medium severity) with network attack vector, low impact on confidentiality, integrity, and availability, and no privileges or user interaction required. No official patch or remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database remotely, potentially leading to unauthorized data access or modification. The CVSS vector indicates limited impact on confidentiality, integrity, and availability. There is no indication of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing input validation and parameterized queries as temporary mitigations to prevent SQL injection via the 'roll' parameter.