CVE-2026-2172: code-projects Online Application System for Admission Login Endpoint index.php sql injection
A vulnerability was determined in code-projects Online Application System for Admission 1.0. Affected by this vulnerability is an unknown functionality of the file enrollment/index.php of the component Login Endpoint. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2172?
CVE-2026-2172 has a high severity rating due to its ability to allow SQL injection attacks through the login endpoint.
How do I fix CVE-2026-2172?
To fix CVE-2026-2172, validate and sanitize all user inputs to prevent SQL injection vulnerabilities.
What components are affected by CVE-2026-2172?
CVE-2026-2172 affects the enrollment/index.php file in the Online Application System for Admission component.
What is the nature of the vulnerability described in CVE-2026-2172?
CVE-2026-2172 is an SQL injection vulnerability that can be exploited through the login functionality.
Is CVE-2026-2172 still a concern for current installations?
Yes, if the affected versions of the Online Application System for Admission are in use and not patched, CVE-2026-2172 remains a significant security concern.