The vulnerability in SourceCodester Stock Management System 1.0 involves SQL injection via the ID argument processed by the /classes/Master.php?f=delete_supplier file. This allows an attacker with high privileges to remotely inject SQL code due to insufficient input validation or sanitization. The CVSS 4.0 base score is 5.1, indicating medium severity with network attack vector, low complexity, no user interaction, and partial impact on confidentiality, integrity, and availability. No official fix or patch is currently documented.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, modification, or deletion. The impact is limited by the requirement of high privileges for the attacker and the low to partial impact on system confidentiality, integrity, and availability as per the CVSS vector.

No official patch or remediation has been published by the vendor. Users should monitor the vendor advisory for updates. Until a fix is available, restricting access to the vulnerable endpoint and validating or sanitizing inputs at the application or database layer may reduce risk.