This vulnerability affects code-projects Student Details Management System 1.0. It arises from improper sanitization of the 'roll' argument in the /index.php file, enabling remote attackers to inject SQL commands. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Exploit code is publicly available, increasing the risk of exploitation. No vendor advisory or patch links are currently available, and the remediation level is unknown.

Successful exploitation allows remote attackers to perform SQL injection attacks, potentially leading to unauthorized data access or modification within the Student Details Management System database. The vulnerability does not require privileges or user interaction, increasing its risk. However, the CVSS vector indicates low to limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing input validation and parameterized queries as temporary mitigations to reduce SQL injection risk. Monitor for updates from the vendor regarding patches or official mitigations.