A vulnerability identified as critical has been detected in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /delete_member.php. The manipulation of the argument ID leads to sql injection.
This vulnerability is listed as CVE-2026-5196. The attack may be initiated remotely. In addition, an exploit is available.