PT-2026-4815 · Code Projects · Code-Projects Online Music Site

M202372062 · Publicado 2026-01-26 · Atualizado 2026-01-26 · CVE-2026-1443

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0

Description A flaw exists in code-projects Online Music Site version 1.0, specifically within the file /Administrator/PHP/AdminDeleteUser.php. Manipulation of the ID argument can lead to SQL injection. This issue is remotely exploitable and an exploit has been published. The affected functionality is currently unknown.

Recommendations Apply any available updates or patches for code-projects Online Music Site version 1.0. As a temporary workaround, restrict access to the file /Administrator/PHP/AdminDeleteUser.php. Sanitize the ID parameter before using it in any database queries.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-1443

Produtos afetados

Code-Projects Online Music Site

Referências · 8

• 🔥 https://github.com/Volije/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1443 · Nota de Segurança
• https://code-projects.org · Nota
• https://vuldb.com/?ctiid.342872 · Nota
• https://twitter.com/CVEnew/status/2015890082016731262 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-1443 · Aviso do Fabricante
• https://vuldb.com/?submit.736967 · Nota
• https://vuldb.com/?id.342872 · Nota