This vulnerability affects SourceCodester Class and Exam Timetabling System 1.0 in the /edit_subject2.php file. An attacker can manipulate the ID parameter to perform SQL injection attacks remotely without any privileges or user interaction. The vulnerability is publicly disclosed with exploit code available. No official remediation or patch has been indicated in the provided data.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The vulnerability is remotely exploitable without authentication, increasing its risk. However, the impact is rated medium severity and no active exploitation in the wild is currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is indicated, users should monitor for vendor updates and consider implementing input validation or web application firewall rules to mitigate SQL injection risks in the meantime.