This vulnerability affects SourceCodester Class and Exam Timetabling System 1.0, specifically in the /edit_coursea.php script where the ID parameter is not properly sanitized. This allows an attacker to perform SQL injection remotely, potentially leading to unauthorized data access or modification. The CVSS 4.0 base score is 6.9, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. No vendor advisory or patch information is available, and the vulnerability state is published with no remediation level specified.

Successful exploitation can lead to unauthorized SQL query manipulation, which may result in partial disclosure, modification, or deletion of database information. The impact is limited but can compromise the integrity and confidentiality of the system's data related to class and exam scheduling.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and parameterized queries as a temporary mitigation to prevent SQL injection via the ID parameter in /edit_coursea.php.