A vulnerability classified as critical was found in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection.
This vulnerability is listed as CVE-2026-0575. The attack may be performed from remote. In addition, an exploit is available.
