PT-2026-1238 · Code Projects · Online Product Reservation System
Ho Cherry
·
Publicado
2026-01-05
·
Atualizado
2026-01-10
·
CVE-2026-0583
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
code-projects Online Product Reservation System version 1.0
Description
A security flaw exists in code-projects Online Product Reservation System version 1.0. The issue is located in the file
app/user/login.php within the User Login component. Manipulation of the emailadd argument can lead to SQL injection. This attack can be initiated remotely. The exploit has been publicly released.Recommendations
Apply any available updates or patches for code-projects Online Product Reservation System version 1.0. As a temporary workaround, consider sanitizing the
emailadd input to prevent SQL injection. Restrict access to the app/user/login.php file to minimize the risk of exploitation.Exploit
Correção
SQL injection
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Online Product Reservation System