CVE-2026-6151 | code-projects Vehicle Showroom Management System 1.0 PaymentStatusFunction.php CUSTOMER_ID sql injection

A vulnerability, which was classified as critical, was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMER_ID results in sql injection.

This vulnerability is known as CVE-2026-6151. It is possible to launch the attack remotely. Furthermore, an exploit is available.