SourceCodester Dental Clinic Appointment Reservation System 1.0 contains a SQL injection vulnerability in the /success.php file. Manipulating the username or password parameters can lead to unauthorized database queries. The vulnerability can be exploited remotely and public exploit code is available. The CVSS score is 6.3, indicating a medium severity risk.