A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
CVE-2026-5650 is a medium-severity vulnerability in Online Application System for Admission 1.0 that allows remote attackers to access insecurely stored sensitive information through manipulation of the /enrollment/database/oas.sql file. The vulnerability has been publicly disclosed and poses a risk to educational institutions managing student admission data.
يؤثر هذا الضعف على نظام التطبيق الإلكتروني للقبول النسخة 1.0 ويسمح بالوصول غير المصرح إلى البيانات الحساسة المخزنة بشكل غير آمن. يمكن استغلال الثغرة عن بعد من خلال التلاعب بملف قاعدة البيانات oas.sql. تم الإفصاح العلني عن الثغرة مما يزيد من خطر الاستغلال.
CVE-2026-5650 is a medium-severity vulnerability in Online Application System for Admission 1.0 that allows remote attackers to access insecurely stored sensitive information through manipulation of the /enrollment/database/oas.sql file. The vulnerability has been publicly disclosed and poses a risk to educational institutions managing student admission data.
Update to a patched version of the Online Application System for Admission if available; implement database access controls and encryption for sensitive data at rest; restrict file permissions on oas.sql; conduct a security audit of stored credentials and personal information; implement input validation and parameterized queries to prevent database manipulation.
قم بالترقية إلى نسخة محدثة من نظام التطبيق الإلكتروني للقبول إن توفرت؛ طبق ضوابط الوصول للقاعدة البيانات والتشفير للبيانات الحساسة؛ قيد صلاحيات الملفات على oas.sql؛ أجر تدقيق أمني للبيانات المخزنة والمعلومات الشخصية؛ طبق التحقق من صحة المدخلات والاستعلامات المعاملة.