A vulnerability identified as critical has been detected in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection.
This vulnerability is identified as CVE-2026-2171. The attack can be initiated remotely. Additionally, an exploit exists.
