PT-2026-30600 · Code Projects · Online Application System For Admission

Ahmadmarzouk · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-5650

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions code-projects Online Application System for Admission version 1.0

Description A vulnerability exists in code-projects Online Application System for Admission 1.0, specifically involving an unknown function within the /enrollment/database/oas.sql file. This allows for insecure storage of sensitive information through manipulation. The attack can be carried out remotely, and the exploit has been made public.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-200

CWE-922

Related Identifiers

CVE-2026-5650

Affected Products

Online Application System For Admission

References · 8

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20Application%20System%20for%20Admission%20PHP%20Exposed%20Database%20Backup.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5650 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/355438/cti · Note
• https://vuldb.com/vuln/355438 · Note
• https://twitter.com/CVEnew/status/2041123753346887799 · Twitter Post
• https://twitter.com/infoflowcloud/status/2041125284674421150 · Twitter Post
• https://vuldb.com/submit/786307 · Note