PT-2026-4815 · Code Projects · Code-Projects Online Music Site

M202372062 · Published 2026-01-26 · Updated 2026-01-26 · CVE-2026-1443

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0

Description A flaw exists in code-projects Online Music Site version 1.0, specifically within the file /Administrator/PHP/AdminDeleteUser.php. Manipulation of the ID argument can lead to SQL injection. This issue is remotely exploitable and an exploit has been published. The affected functionality is currently unknown.

Recommendations Apply any available updates or patches for code-projects Online Music Site version 1.0. As a temporary workaround, restrict access to the file /Administrator/PHP/AdminDeleteUser.php. Sanitize the ID parameter before using it in any database queries.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-1443

Affected Products

Code-Projects Online Music Site

References · 8

• 🔥 https://github.com/Volije/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1443 · Security Note
• https://osv.dev/vulnerability/CVE-2026-1443 · Vendor Advisory
• https://code-projects.org · Note
• https://vuldb.com/?ctiid.342872 · Note
• https://twitter.com/CVEnew/status/2015890082016731262 · Twitter Post
• https://vuldb.com/?submit.736967 · Note
• https://vuldb.com/?id.342872 · Note