A vulnerability categorized as critical has been discovered in code-projects Vehicle Showroom Management System 1.0. The impacted element is an unknown function of the file /util/VehicleDetailsFunction.php. The manipulation of the argument VEHICLE_ID results in sql injection.
This vulnerability is identified as CVE-2026-6036. The attack can be executed remotely. Additionally, an exploit exists.
