This vulnerability affects sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0, specifically an unknown function within the Login Page component. An attacker can remotely exploit improper input validation on the email parameter to perform SQL injection. The CVSS 4.0 base score is 6.9, indicating medium severity with network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. The vendor has been notified but has not issued a fix or mitigation guidance.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database via the email parameter on the login page. This may lead to unauthorized data access or modification. However, the impact is rated medium due to limited scope and partial impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's communications for updates. Until a fix is released, consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the login page email parameter. Avoid exposing the vulnerable system to untrusted networks if possible.