CVE-2026-5649

MediumCVSS 6.3

Published: 06/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the component Endpoint. Such manipulation leads to SQL injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Risk Assessment

An attacker can execute arbitrary SQL queries, potentially accessing, modifying, or taking control of the system.

Recommendation

Update the software to a patched version as soon as possible (if available) or apply mitigations such as input validation and parameterized queries. Consider deploying a WAF.

Other vulnerabilities in Online Application System for Admission

CVE-2026-5650Medium
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Original NVD description (English source)

A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the component Endpoint. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS