This vulnerability affects itsourcecode Content Management System 1.0 and involves SQL injection via the topic_id parameter in the /instructions.php file. An attacker can remotely manipulate this parameter to inject SQL commands, potentially compromising the backend database. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. Public exploit code exists, but no official fix or patch has been published as of the data provided.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. However, the impact is limited as indicated by the CVSS vector, with low confidentiality, integrity, and availability impacts. No known active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying web application firewalls or input validation controls to mitigate SQL injection risks. Monitor vendor channels for updates and patches addressing this vulnerability.