CVE-2026-6152 | code-projects Vehicle Showroom Management System 1.0 StaffAddingFunction.php STAFF_ID sql injection

A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /util/StaffAddingFunction.php. This manipulation of the argument STAFF_ID causes sql injection.

This vulnerability is handled as CVE-2026-6152. The attack can be initiated remotely. Additionally, an exploit exists.