A vulnerability classified as critical was found in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection.
This vulnerability is identified as CVE-2026-7072. The attack can be executed remotely. Additionally, an exploit exists.
