PT-2026-35683 · Code Projects · Online Music Site

The_Better_You · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7238

NVD

CVSS v2.0

5.8

Medium

AV:N/AC:L/Au:M/C:P/I:P/A:P

A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. This manipulation of the argument txtimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-7238

Affected Products

Online Music Site

References · 6

• 🔥 https://github.com/gtxy114514/CVE/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7238 · Security Note
• https://vuldb.com/vuln/359846 · Note
• https://vuldb.com/vuln/359846/cti · Note
• https://vuldb.com/submit/802840 · Note
• https://code-projects.org · Note