A vulnerability was found in code-projects Online Examination System 1.0. It has been declared as critical. Affected by this issue is some unknown functionality of the file /admin_pic.php. Executing a manipulation can lead to unrestricted upload.
This vulnerability appears as CVE-2026-1423. The attack may be performed from remote. In addition, an exploit is available.