CodeAstro Student Grading System SQL Injection Vulnerability

A critical SQL injection vulnerability has been identified in CodeAstro Student Grading System version 1.0. The issue resides in the 'studentsubject.php' file, where the 'studentId' parameter is manipulated, allowing attackers to inject malicious SQL queries. This vulnerability can be exploited remotely and has been publicly disclosed.

Impact

Exploitation of this vulnerability allows unauthorized database access, manipulation of data, and access to sensitive information without authentication.

Reproduction

The vulnerability can be reproduced by sending a GET request to 'index.php' with the 'studentId' parameter. The request can include payloads that exploit the SQL injection, such as boolean-based blind, error-based, time-based blind, and UNION query injections.

Remediation

No specific remediation is known for this vulnerability.