A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /delete_faculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

A SQL injection vulnerability has been identified in SourceCodester Online Faculty Clearance System version 1.0. The vulnerability exists in the /delete_faculty1.php file, where manipulation of the 'ID' argument allows SQL injection attacks. The attack can be executed remotely without requiring physical access to the target system. A public exploit has already been disclosed, increasing the risk of active exploitation. The vulnerability was reported via GitHub and tracked on VulDB in addition to the NVD. Affected users of the SourceCodester platform should apply patches or mitigations immediately. The public availability of the exploit raises the urgency for remediation.