A SQL injection vulnerability (CVE-2026-10263) was discovered in SourceCodester Computer Repair Shop Management System version 1.0. The vulnerability affects the /admin/products/manage_product.php file through manipulation of the ID parameter. This flaw can be exploited remotely and allows attackers to perform SQL injection attacks. The exploit has been publicly disclosed and is available for use, making this a high-risk vulnerability for affected systems.