A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. Impacted is an unknown function of the f…

A SQL injection vulnerability has been discovered in raisulislamg4 student_management_system_by_php affecting the delete.php file. The flaw allows remote attackers to manipulate parameters including user_id, course_id, teacher_id, student_id, and application_id to execute SQL injection attacks. The exploit has been publicly disclosed and can be actively used. The affected system operates on a rolling release basis with no specific version numbers. Despite early notification through an issue report, the project maintainers have not responded to address the vulnerability.