CVE-2026-0851
7.3HIGHA vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txt
Published: 1/12/2026Updated: 1/14/2026
Description
A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
AI AnalysisPowered by AI
Affected Products
fabianonline_music_site
1.0
References
- https://code-projects.org/Product
- https://github.com/tuo159515/sql-injection/issues/2ExploitIssue Tracking
- https://vuldb.com/?ctiid.340446Permissions RequiredVDB Entry
- https://vuldb.com/?id.340446Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.733644Third Party AdvisoryVDB Entry