A vulnerability described as critical has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing of the file /admin/search.php. Executing manipulation of the argument keyname can lead to sql injection.
This vulnerability appears as CVE-2025-14589. The attack may be performed from remote. In addition, an exploit is available.