A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

A SQL injection vulnerability has been identified in SourceCodester College Notes Gallery Management System 1.0. The vulnerability exists in the /College/login.php file, where manipulation of the 'User' argument allows SQL injection attacks. The flaw can be exploited remotely without requiring physical access to the system. A public exploit has already been disclosed, increasing the risk of active exploitation. The affected product is a web-based academic management application. This type of vulnerability can lead to unauthorized access, data exfiltration, or full database compromise. Organizations using this software should apply patches or mitigations immediately. The vulnerability has been catalogued in VulDB and reported via GitHub.