This vulnerability in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 involves improper sanitization of the email parameter on the Login Page, enabling remote attackers to perform SQL injection. The vulnerability allows unauthorized manipulation of backend database queries, potentially leading to unauthorized data access or modification. The CVSS 4.0 vector indicates the attack requires no privileges or user interaction and has low to low impact on confidentiality, integrity, and availability. No official remediation or patch has been released by the vendor as of the publication date.

Successful exploitation can lead to unauthorized SQL query execution on the backend database, potentially exposing or altering sensitive student management data. The medium severity score reflects limited impact due to low confidentiality, integrity, and availability impacts, but the vulnerability still poses a significant risk given the lack of vendor response and the availability of exploit code.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been provided by the vendor, users should consider implementing manual input validation and parameterized queries as temporary mitigations. Monitoring for unusual database activity and restricting access to the affected system may also help reduce risk until an official patch is available.