CVE-2026-5649: code-projects Online Application System for Admission Endpoint admsnform.php sql injection

Published Apr 6, 2026

Updated

A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the component Endpoint. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Code-projects Online Application System for Admission=1.0

Event History

Apr 6, 2026

CVE Published

via MITRE·11:15 AM

Data Sourced

via MITRE·11:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-5649?

CVE-2026-5649 is classified as a high-severity SQL injection vulnerability.

How do I fix CVE-2026-5649?

To fix CVE-2026-5649, sanitize user inputs and use prepared statements to prevent SQL injection.

What components are affected by CVE-2026-5649?

CVE-2026-5649 affects the enrollment/admsnform.php file in the Code-Projects Online Application System for Admission version 1.0.

What kind of attacks can be executed through CVE-2026-5649?

CVE-2026-5649 allows attackers to execute arbitrary SQL queries, potentially compromising the database.

Is CVE-2026-5649 present in earlier versions of the software?

CVE-2026-5649 specifically affects version 1.0 of the Code-Projects Online Application System for Admission, so earlier versions are not known to be impacted.