CVE-2026-5650
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Risk Assessment
Sensitive information may be stored insecurely, potentially leading to its leakage. The public availability of the exploit increases the risk of exploitation.
Recommendation
Restrict access to the /enrollment/database/oas.sql file and consider applying patches or updates from the vendor. If no patches are available, consider disabling the vulnerable component.
Other vulnerabilities in Online Application System for Admission
Original NVD description (English source)
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

