CVE-2026-37342 identifies a SQL Injection vulnerability (CWE-89) in SourceCodester Vehicle Parking Area Management System v1.0, specifically in the /parking/view_parked_details.php script. The vulnerability enables an attacker with high privileges to inject malicious SQL queries, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been provided by the vendor, and no known exploits have been reported.

Successful exploitation of this SQL Injection vulnerability could allow an attacker with high privileges to access, modify, or delete sensitive data within the database, potentially disrupting system operations and compromising data confidentiality and integrity. The high CVSS score reflects the significant impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system and limit privileges to trusted users only. Review and harden input validation and database query handling in the /parking/view_parked_details.php file if possible.