Sourcecodester Computer and Mobile Repair Shop Management System version 1.0 contains an SQL injection flaw in the file /rsms/admin/inquiries/view_details.php. Unsanitized user input is directly incorporated into a database query, allowing an attacker to inject arbitrary SQL statements. The potential consequences for an attacker—including the ability to read or modify data—are not explicitly detailed by the advisory and are therefore inferred from the nature of SQL injection.

The only documented affected product is the Sourcecodester Computer and Mobile Repair Shop Management System, version 1.0, as indicated by the CPE string provided.

The CVSS score of 2.7 indicates low severity, and the EPSS score of less than 1% suggests a low probability of exploitation. The vulnerability is not listed in CISA's KEV catalog. Based on the description, the likely attack path involves sending an HTTP request to /rsms/admin/inquiries/view_details.php. The advisory does not state whether authentication is required for this endpoint; this assumption is inferred from the limited information. These details are not directly documented in the advisory.