This vulnerability involves SQL injection in the Online Application System for Admission 1.0 by code-projects. Specifically, the flaw is in the processing of the /enrollment/admsnform.php file, which can be exploited remotely to inject malicious SQL commands. The CVSS 4.0 base score is 5.3, indicating a medium level of severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. No vendor advisory or patch information is provided, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. However, the impact is rated as limited in confidentiality, integrity, and availability, reflecting a medium severity. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation and parameterized queries as temporary mitigations if possible. Monitor for vendor updates regarding patches or official mitigations.