This vulnerability in SourceCodester Class and Exam Timetabling System 1.0 involves SQL injection via the ID parameter in the /edit_subject1.php script. An attacker can remotely manipulate this parameter to execute arbitrary SQL queries against the backend database. The vulnerability is publicly disclosed with known exploit code, but no official fix or mitigation has been documented. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary SQL commands on the database, potentially leading to unauthorized data access or modification. The impact is rated medium severity with limited confidentiality, integrity, and availability impact as per the CVSS 4.0 vector. There are no confirmed reports of exploitation in the wild.

No official patch or remediation guidance is currently available. Users should monitor the vendor or authoritative sources for updates. In the meantime, restricting access to the vulnerable endpoint and employing web application firewalls to detect and block SQL injection attempts may reduce risk.