The itsourcecode Pet Shop Management System 1.0 contains a SQL injection vulnerability in an unknown function within the admin_reject_completed.php file. The vulnerability arises from manipulation of the ID argument, allowing remote attackers to execute SQL injection attacks. The vulnerability is publicly disclosed but no known exploits in the wild have been reported. The CVSS 3.1 base score is 6.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database remotely, potentially leading to unauthorized data disclosure, data modification, or denial of service conditions affecting the Pet Shop Management System.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is currently available. Until a patch is released, restrict access to the affected functionality and monitor for suspicious activity related to SQL injection attempts.