A vulnerability, which was classified as critical, was found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing manipulation can lead to unrestricted upload.
This vulnerability is registered as CVE-2026-0577. It is possible to launch the attack remotely. Furthermore, an exploit is available.