The Smart Parking System 1.0 by code-projects contains a SQL injection vulnerability in an unspecified function located in /parkings/parkings.php. This vulnerability arises from improper sanitization of input parameters (street, city, status), allowing an attacker to inject SQL commands remotely without any privileges or user interaction. The vulnerability is publicly known, but no official patch or remediation guidance has been provided by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, data modification, or other database impacts. The vulnerability is remotely exploitable without authentication, increasing its risk. However, the CVSS vector indicates low to limited impact on confidentiality, integrity, and availability, consistent with a medium severity rating.

No official patch or remediation is currently available from the vendor. Users of Smart Parking System 1.0 should monitor the vendor's advisory channels for updates. Until a fix is released, consider restricting access to the vulnerable endpoint or applying web application firewall rules to detect and block SQL injection attempts targeting the street, city, and status parameters.