A vulnerability described as critical has been identified in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection.

This vulnerability is identified as CVE-2025-11585. The attack can be executed remotely. Additionally, an exploit exists.