A vulnerability labeled as critical has been found in code-projects Online Application System for Admission 1.0. Affected by this vulnerability is an unknown functionality of the file enrollment/index.php of the component Login Endpoint. Executing a manipulation can lead to sql injection.
This vulnerability is tracked as CVE-2026-2172. The attack can be launched remotely. Moreover, an exploit is present.