The vulnerability exists in the Barangay Resident Profiling Management System 1.0, specifically in the residents.php file's Resident Search Functionality. An attacker can manipulate the Search parameter to perform SQL injection, potentially allowing unauthorized access or modification of the database. The vulnerability is remotely exploitable without authentication. The CVSS 4.0 base score is 6.9, indicating a medium severity level. No official patch or remediation has been documented at this time.

Successful exploitation of this SQL injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data access, data modification, or other database impacts depending on the database privileges of the application. Since the vulnerability is remotely exploitable without authentication, it poses a significant risk to confidentiality and integrity of the system's data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to apply input validation and parameterized queries to mitigate SQL injection risks in the affected component. Monitor vendor channels for updates and patches.