SourceCodester Online Magazine Management System 1.0 contains a SQL injection vulnerability in the /categories.php file via the 'c' parameter. This vulnerability allows remote attackers with low privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Public exploit code is available. The CVSS score is 6.3, indicating a medium severity risk.