This vulnerability affects the Online Application System for Admission 1.0 by code-projects. It arises from insecure storage of sensitive data in the database script file /enrollment/database/oas.sql. The vulnerability can be triggered remotely without requiring privileges or user interaction, potentially exposing sensitive information. The CVSS 4.0 base score is 6.9, indicating a medium severity level. No official fix or patch has been documented, and the vendor has not provided remediation guidance. Exploit code is publicly available, increasing the risk of exploitation.

Sensitive information handled by the application may be stored insecurely, potentially allowing remote attackers to access or manipulate this data. This could lead to unauthorized disclosure of sensitive data. The vulnerability does not require privileges or user interaction to exploit, increasing its risk. However, the exact impact depends on the nature of the sensitive information stored and the attacker's ability to leverage it.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider restricting remote access to the affected system and monitor for suspicious activity related to the vulnerable component. Avoid deploying the affected version in sensitive environments if possible.