SourceCodester Advanced School Management System SQL Injection Vulnerability

SourceCodester Advanced School Management System version 1.0 is vulnerable to SQL injection in the checkEmail endpoint within the commonController.php file. This vulnerability, identified as CVE-2026-7545, allows a remote attacker to inject arbitrary SQL commands. Publicly available exploits targeting this vulnerability increase the risk of exploitation. Successful exploitation could lead to unauthorized data access, modification, or deletion within the application’s database. Given the availability of public exploits, organizations using this software are at an elevated risk.

Attack Chain

1. The attacker identifies the checkEmail endpoint in commonController.php.
2. The attacker crafts a malicious HTTP request to the checkEmail endpoint, injecting SQL code into the email parameter.
3. The vulnerable application fails to properly sanitize the email input.
4. The injected SQL code is passed directly to the database query.
5. The database executes the malicious SQL code.
6. The attacker gains unauthorized access to the database.
7. The attacker may then read sensitive data, modify existing data, or insert new malicious data.
8. The attacker might also use this to escalate privileges within the application.

Impact

Successful exploitation of this SQL injection vulnerability (CVE-2026-7545) could allow an attacker to read, modify, or delete sensitive data stored in the Advanced School Management System database. This could include student records, financial information, or administrative credentials. The availability of public exploits increases the likelihood of attacks targeting this vulnerability, potentially impacting any organization using the affected software.

Recommendation

• Apply input validation and sanitization to the checkEmail endpoint in commonController.php to prevent SQL injection attacks.
• Deploy the Sigma rule Detect ASMS CheckEmail SQL Injection Attempt to identify exploitation attempts in web server logs.
• Monitor web server logs for suspicious activity related to the checkEmail endpoint.