A vulnerability classified as critical was found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection.
This vulnerability is tracked as CVE-2026-4625. The attack can be launched remotely. Moreover, an exploit is present.