The vulnerability permits injection of arbitrary SQL commands via the manage_category.php script in the Vehicle Parking Area Management System. Based on the description, it is inferred that this flaw might permit unauthorized read, update, or deletion of data stored in the underlying database, potentially compromising confidentiality and integrity of the parking records.

SourceCodester Vehicle Parking Area Management System, version 1.0. The only affected file is parking/manage_category.php.

The CVSS score is 7.2, classifying the severity as high. The EPSS score is < 1%, indicating a low current likelihood of exploitation. Based on the description, it is inferred that the injection is reachable via a standard HTTP request to the vulnerable PHP page, meaning that users with web access could potentially exploit it if the system is exposed to the internet. The vulnerability is not listed in CISA's KEV catalog. Without an official patch, the risk persists until mitigated.