This vulnerability affects code-projects Smart Parking System 1.0. It arises from improper sanitization of input parameters (street, city, status) in a function located in /parkings/parkings.php, allowing an attacker to perform SQL injection remotely without any privileges or user interaction. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity) indicating that exploitation is feasible over the network and can compromise data confidentiality, integrity, and availability to a limited extent. No vendor-provided patch or official remediation is currently documented.

Successful exploitation of this SQL injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, modification, or deletion. The vulnerability impacts data confidentiality, integrity, and availability with limited scope and impact as indicated by the CVSS vector. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation and parameterized queries as temporary mitigations if possible. Monitor vendor channels for updates and patches addressing this vulnerability.