A vulnerability classified as critical was found in code-projects Vehicle Showroom Management System 1.0. Affected by this issue is some unknown functionality of the file /util/BookVehicleFunction.php. Executing a manipulation of the argument BRANCH_ID can lead to sql injection.
This vulnerability appears as CVE-2026-6149. The attack may be performed from remote. In addition, an exploit is available.
