CVE-2026-5649

MEDIUM

code-projects Online Application System for Admission Endpoint admsnform.php sql injection

Title source: cna

Description

A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the component Endpoint. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5

Core References

Vdb Entry vdb-entry

VDB-355437 | code-projects Online Application System for Admission Endpoint admsnform.php sql injection

https://vuldb.com/vuln/355437

Signature, Permissions Required signature permissions-required

VDB-355437 | CTI Indicators (IOB, IOC, TTP, IOA)

https://vuldb.com/vuln/355437/cti

Third Party Advisory third-party-advisory

Submit #786302 | code-projects Online Application System For Admission In PHP 1.0 SQL Injection

https://vuldb.com/submit/786302

Exploit exploit

https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/SQL%20Injection%20in%20Online%20Application%20System%20for%20Admission%20PHP%20detid%20Parameter.md

View Exploit ZIP pw:eip

Product product

https://code-projects.org/

Scores

CVSS v3 6.3

EPSS 0.0025

EPSS Percentile 15.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-74 CWE-89

Status published

Products (1)

code-projects/Online Application System for Admission 1.0

Published Apr 06, 2026

Tracked Since Apr 06, 2026