SourceCodester Best House Rental Management System 1.0 contains a SQL injection vulnerability in the save_category function within the /admin_class.php file. This vulnerability allows remote attackers with high privileges to manipulate the Name argument to execute SQL injection attacks. Public exploit code is available for this vulnerability. The CVSS score is 4.7, indicating a medium severity risk.