This vulnerability affects SourceCodester Class and Exam Timetabling System 1.0 and the 1.php file, specifically in the /edit_course1.php script. An attacker can remotely exploit improper input validation of the ID parameter to inject SQL commands, potentially compromising the backend database. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity) with network attack vector, low complexity, no privileges required, no user interaction, and limited impact on confidentiality, integrity, and availability. No official fix or patch has been published by the vendor as of the data provided.

Successful exploitation could allow an attacker to execute arbitrary SQL queries on the backend database, potentially leading to unauthorized data access or modification. The impact is limited to the confidentiality, integrity, and availability of the affected system's data but does not extend to system-level compromise or denial of service based on the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to apply input validation and parameterized queries to the ID argument in /edit_course1.php to prevent SQL injection. Monitor for any vendor updates or patches addressing this vulnerability.