A vulnerability was found in projectworlds Online Notes Sharing System 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php of the component Parameters Handler. The manipulation of the argument User results in sql injection.
This vulnerability is identified as CVE-2026-4540. The attack can be executed remotely. Additionally, an exploit exists.
