A vulnerability marked as critical has been reported in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection.
This vulnerability is listed as CVE-2026-2173. The attack may be initiated remotely. There is no available exploit.