This vulnerability affects SourceCodester Online Faculty Clearance System 1.0. An attacker can remotely exploit a SQL injection flaw in the /delete_faculty1.php file by manipulating the ID parameter. This allows unauthorized SQL commands to be executed on the backend database. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges or user interaction required, with low to limited impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed but no patch or remediation guidance is provided.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the database, potentially leading to unauthorized data access or modification. The impact is rated medium based on the CVSS score of 6.9. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the vulnerable endpoint and implementing web application firewall rules to detect and block SQL injection attempts may help mitigate risk.