A vulnerability labeled as critical has been found in code-projects Vehicle Showroom Management System 1.0. This impacts an unknown function of the file /util/RegisterCustomerFunction.php. Such manipulation of the argument BRANCH_ID leads to sql injection.
This vulnerability is listed as CVE-2026-6038. The attack may be performed from remote. In addition, an exploit is available.
