The vulnerability originates from unsanitized input handling in the view_details.php file, allowing an attacker to inject arbitrary SQL. This flaw can let the attacker read, modify, or delete database records, leading to loss of data integrity and confidentiality.

The affected product is Sourcecodester Computer and Mobile Repair Shop Management System, version 1.0. Only this version is mentioned as vulnerable.

The CVSS score is 2.7, indicating moderate severity. EPSS data is unavailable and the issue is not listed in KEV, suggesting it is not widely exploited yet. The flaw is exploitable through the web interface, likely requiring access to the admin area and potentially authenticated credentials. Without mitigation, an attacker could manipulate the database through the vulnerable endpoint.