The Student Membership System 1.0 contains an SQL injection flaw in delete_member.php. By manipulating the ID parameter, an attacker can inject and execute arbitrary SQL commands against the underlying database. This could lead to unauthorized data access, data modification, or deletion, thereby jeopardizing the confidentiality, integrity, and availability of the system’s data.

The vulnerability affects the code‑projects Student Membership System version 1.0 only. No other products or versions are listed as affected in the available information.

The vulnerability carries a CVSS base score of 5.3, indicating moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Because the description states the attack may be initiated remotely and the exploit has been publicly disclosed, the risk of exploitation is moderate but real. An attacker with network access could potentially exploit the flaw if input validation is lacking and no additional security controls are in place.