CVE-2026-37341 identifies a SQL Injection vulnerability in SourceCodester Vehicle Parking Area Management System v1.0, specifically in the /parking/manage_category.php script. The vulnerability allows an attacker with network access and high privileges to inject malicious SQL queries, impacting confidentiality, integrity, and availability. The CVSS 3.1 score is 7.2, reflecting high severity with network attack vector, low attack complexity, required privileges, and no user interaction needed. No patch or official remediation is currently documented.

Successful exploitation of this SQL Injection vulnerability could allow an attacker to read, modify, or delete database contents, potentially leading to data breaches, unauthorized data manipulation, or denial of service conditions affecting the Vehicle Parking Area Management System. The impact affects confidentiality, integrity, and availability as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected /parking/manage_category.php endpoint to trusted users only and apply input validation or web application firewall rules to detect and block SQL injection attempts.