A vulnerability categorized as critical has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argument a leads to sql injection.

This vulnerability is referenced as CVE-2025-15186. It is possible to launch the attack remotely. Furthermore, an exploit is available.