CVE-2026-0852

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

• https://code-projects.org/
  Product
• https://github.com/Learner636/CVE-smbmit/issues/2
  ExploitIssue Tracking
• https://vuldb.com/?ctiid.340447
  Permissions RequiredVDB Entry
• https://vuldb.com/?id.340447
  Third Party AdvisoryVDB Entry
• https://vuldb.com/?submit.734136
  Third Party AdvisoryVDB Entry