The Simple Student Alumni System v1.0 contains an SQL Injection flaw in the modal_edit.php page. The vulnerability allows an attacker to supply crafted input that is directly incorporated into SQL statements, which can result in unauthorized data retrieval, modification, or deletion. This flaw is identified as CWE-89 and affects confidentiality, integrity, and potentially availability of the underlying data store.

Carmelo Simple Student Alumni System, version 1.0, distributed as a code-projects application. No other vendors or product versions are listed in the vulnerability record.

The CVSS base score of 4.9 indicates a moderate impact with limited exploitation effort. The EPSS score of less than 1% suggests a very low likelihood of current exploitation, and the vulnerability is not present in the CISA KEV catalog. Based on the description, the likely attack vector is through the web interface by submitting malicious input to the modal_edit.php endpoint, possibly requiring user authentication. The risk remains moderate until mitigated because unauthorized data exposure remains a serious concern.