A SQL injection vulnerability exists in SourceCodester Online Reviewer Management System 1.0 within an unspecified functionality of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. The vulnerability is triggered by manipulation of the Title parameter, allowing attackers to inject SQL commands remotely. The CVSS 3.1 score is 7.3, indicating a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. Public exploit code is available, but no confirmed exploitation in the wild has been reported. No vendor advisory or patch information is currently available.

Successful exploitation of this SQL injection vulnerability could allow remote attackers to execute arbitrary SQL commands on the backend database. This may lead to unauthorized disclosure of data, modification of data, or denial of service conditions affecting the application. The vulnerability affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the vulnerable functionality and applying web application firewall rules to detect and block SQL injection attempts targeting the Title parameter. Monitor for updates from the vendor regarding patches or official mitigations.