Uniclare Student Portal SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Uniclare Student Portal version 2. This vulnerability allows remote attackers to inject arbitrary SQL commands through vulnerable input fields. Exploitation of this flaw could enable attackers to execute time-delay functions, potentially leading to unauthorized access to sensitive data such as student records, financial information, and administrative credentials.

Impact

Exploitation of this vulnerability could result in a data breach, allowing unauthorized access to and exfiltration of sensitive student and institutional data. It could also lead to account takeover, compromising student, faculty, and administrative accounts, and potentially allow for further attacks on the underlying server infrastructure. Additionally, such a breach could cause reputational damage to the institution.