The Vulnerability is a classic SQL injection flaw located in the PHP file that handles storage unit management. By embedding crafted SQL fragments into form inputs, an attacker can alter the structure of the database query. The result is the ability to read, modify, or delete protected data, thereby compromising confidentiality, integrity, and potentially availability of the system's records.

The system affected is SourceCodester Storage Unit Rental Management System, version 1.0. No other versions or variants are listed as affected. The application is deployed in a web environment and the vulnerability resides in the administration interface located at /storage/admin/maintenance/manage_storage_unit.php.

The likely attack vector is a web‑based request to the admin panel and requires the attacker to inject data into user‑controlled inputs. Based on the description, it is inferred that authentication to the admin panel may be necessary, but the vulnerability could be triggered by any input that is not properly sanitized. The CVSS score is not provided, EPSS is unavailable, and the vulnerability is not listed in the CISA KEV catalog, leaving the precise exploitation likelihood undefined. Nonetheless, the presence of an SQL injection flaw presents a high potential for data compromise if sufficient access can be obtained.