PT-2026-1116 · Code Projects · Code-Projects Online Music Site

L0Ser · Publicado 2026-01-02 · Atualizado 2026-01-02 · CVE-2026-0570

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0

Description A flaw exists in code-projects Online Music Site 1.0 where manipulation of the fname argument in the /Frontend/Feedback.php file can lead to SQL injection. This issue can be exploited remotely. The exploit has been publicly released.

Recommendations Apply input validation and sanitization to the fname argument in the /Frontend/Feedback.php file.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-0570

Produtos afetados

Code-Projects Online Music Site

Referências · 11

• 🔥 https://github.com/Limingqian123/CVE/issues/18 · Exploit
• https://t.me/cveNotify/147587 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2007190914842681757 · Publicação no Twitter
• https://code-projects.org · Nota
• https://vuldb.com/?ctiid.339382 · Nota
• https://vuldb.com/?id.339382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-0570 · Nota de Segurança
• https://vuldb.com/?submit.729253 · Nota
• https://twitter.com/CVEnew/status/2007193957823066148 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-0570 · Aviso do Fabricante
• https://t.me/CVEtracker/41285 · Publicação no Telegram