PT-2026-47251 · Code Projects · Online Music Site

1875336894 · Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-11489

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminDeleteAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-11489

Affected Products

Online Music Site

References · 7

• 🔥 https://github.com/11snk/CVE/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-11489 · Security Note
• https://vuldb.com/submit/834743 · Note
• https://vuldb.com/cve/CVE-2026-11489 · Note
• https://vuldb.com/vuln/369109 · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/369109/cti · Note