This vulnerability in code-projects Interview Management System 1.0 allows remote attackers to perform SQL injection via manipulation of the ID argument in the \inc\classes\View.php file. The vulnerability enables unauthorized SQL query manipulation, potentially leading to data exposure or modification. The exploit is publicly available, but no official patch or remediation guidance has been provided by the vendor as of the publication date.

Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The vulnerability does not require user interaction or privileges and has low complexity, but the overall impact is rated medium due to limited scope or partial impact as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and parameterized queries to mitigate SQL injection risks in the affected component. Monitor official vendor channels for updates or patches.