The vulnerability in SourceCodester Online Reviewer Management System 1.0 is a SQL injection flaw caused by improper sanitization of the test_id argument in the file /reviewer_0/admins/assessments/pretest/btn_functions.php?action=update. This allows an unauthenticated remote attacker to manipulate SQL queries, potentially leading to unauthorized data access or modification. The exploit has been publicly disclosed, increasing the risk of exploitation.

Successful exploitation of this SQL injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data disclosure, data modification, or other database-related impacts. However, no active exploitation in the wild has been reported.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, it is recommended to restrict access to the vulnerable endpoint and monitor for suspicious activity related to the test_id parameter.