Vulnerability · Published Apr 6, 2026 · Assigned by VulDB
CVE-2026-5650code-projects Online Application System for Admission oas.sql sensitive information
Medium 5.3
In plain English
A medium-severity information exposure in Online Application System for Admission from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Official description
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Online Application System for Admission | 1.0 |
Weakness: CWE-922, CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-355438 | code-projects Online Application System for Admission oas.sql sensitive information vdb-entry
- VDB-355438 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #786307 | code-projects Online Application System For Admission In PHP 1.0 Information Disclosure third-party-advisory
- https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20Application%20System%20for%20Admission%20PHP%20Exposed%20Database%20Backup.md exploit
- https://code-projects.org/ product