A vulnerability was found in code-projects Vehicle Showroom Management System 1.0 and classified as critical. Impacted is an unknown function of the file /util/StaffDetailsFunction.php. Such manipulation of the argument STAFF_ID leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-6153. The attack can be launched remotely. Moreover, an exploit is present.
