A vulnerability marked as critical has been reported in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. This manipulation of the argument fname causes sql injection.
This vulnerability is tracked as CVE-2025-9610. The attack is possible to be carried out remotely. Moreover, an exploit is present.
Other parameters might be affected as well.
