A SQL injection vulnerability has been discovered in code-projects Student Admission System version 1.0. The flaw affects an unknown function in the /index.php file where manipulation of the eid/did arguments leads to SQL injection. The vulnerability can be exploited remotely and exploit code has been publicly published, making it actively exploitable. This represents a significant security risk for organizations using this student management system.