CVE-2026-7131

code-projects Online Lot Reservation System loginuser.php sql injection

CVSS 6.9 MEDIUMEPSS 0.3%CWE-74 CWE-89

A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. The impacted element is an unknown function of the file /loginuser.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

code-projects · Online Lot Reservation System

public PoCs found — 1

cve_referencegithub.com/zzk6th/cve/issues/1unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://code-projects.org/https://github.com/zzk6th/cve/issues/1 https://vuldb.com/submit/800978 https://vuldb.com/vuln/359730 https://vuldb.com/vuln/359730/cti