SourceCodester Advanced School Management System 1.0 contains a SQL injection vulnerability in an unknown function within commonController.php's checkEmail endpoint. This flaw allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a CVSS score of 7.3, indicating high severity.