CVE-2026-0851
7.3HIGHA vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txt
Publicado: 1/12/2026Actualizado: 1/14/2026
Descripción
A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Análisis IAImpulsado por IA
Productos Afectados
fabianonline_music_site
1.0
Referencias
- https://code-projects.org/Product
- https://github.com/tuo159515/sql-injection/issues/2ExploitIssue Tracking
- https://vuldb.com/?ctiid.340446Permissions RequiredVDB Entry
- https://vuldb.com/?id.340446Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.733644Third Party AdvisoryVDB Entry