A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_requirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A SQL injection vulnerability has been identified in SourceCodester Online Faculty Clearance System version 1.0. The vulnerability exists in the file /delete_requirement.php, where manipulation of the 'ID' argument allows an attacker to perform SQL injection attacks. The attack can be initiated remotely without requiring physical access to the system. The exploit has been publicly disclosed, meaning it can be leveraged by malicious actors. This vulnerability poses a significant risk as it may allow unauthorized access to or manipulation of the underlying database. The affected product is a web-based faculty clearance management system commonly used in academic institutions. No patch or mitigation details are mentioned in the article.