A SQL injection vulnerability has been discovered in SourceCodester Online Admission System version 1.0. The flaw affects an unknown function in the /programmes.php file through manipulation of the 'program' argument. The vulnerability can be exploited remotely and allows attackers to perform SQL injection attacks. A public exploit has been published and is available for use, making this a high-risk vulnerability. The affected system is commonly used for educational institution admission processes.