The code-projects Interview Management System version 1.0 contains a SQL injection vulnerability due to improper sanitization or validation of the ID parameter in the \inc\classes\View.php file. This flaw allows remote attackers to inject malicious SQL code by manipulating the ID argument, potentially compromising the database. The vulnerability is publicly known with exploit code available, but there is no vendor-provided fix or mitigation at this time.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, modification, or deletion. The CVSS score of 6.9 reflects a medium impact with low attack complexity and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing web application firewalls or input validation controls to mitigate SQL injection risks. Monitor vendor channels for updates and apply patches promptly once available.