A SQL injection vulnerability was discovered in raisulislamg4's student_management_system_by_php application. The vulnerability affects the login_check.php file in the Login component, where manipulation of the Username argument leads to SQL injection. The attack can be initiated remotely and the exploit is now publicly available. The affected version is up to commit 310d950e09013d5133c6b9210aff9444382d16d1. The project maintainer has been notified through an issue report but has not responded yet.