CVE-2026-0851
7.3HIGHA vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txt
Veröffentlicht: 1/12/2026Aktualisiert: 1/14/2026
Beschreibung
A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
KI-AnalyseKI-gestützt
Betroffene Produkte
fabianonline_music_site
1.0
Referenzen
- https://code-projects.org/Product
- https://github.com/tuo159515/sql-injection/issues/2ExploitIssue Tracking
- https://vuldb.com/?ctiid.340446Permissions RequiredVDB Entry
- https://vuldb.com/?id.340446Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.733644Third Party AdvisoryVDB Entry