A SQL injection vulnerability has been discovered in sambitraj STUDENT-MANAGEMENT-SYSTEM version 1.0. The flaw affects the Login Page component where manipulation of the email argument can lead to SQL injection attacks. The vulnerability can be exploited remotely and exploit code has been publicly published. The project maintainer was notified through an issue report but has not responded to the disclosure. This represents a high-severity vulnerability due to the remote exploitability and availability of public exploits.