CVE-2026-0583mediumCWE-74CWE-89

CVE-2026-0583: fallo de gravedad media en code-projects Online Product Reservation System

code-projects Online Product Reservation System User Login login.php sql injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Online Product Reservation System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.4%
A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
code-projects · Online Product Reservation System
CVEs relacionadas — code-projects Online Product Reservation System

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-0589MEDIUMcode-projects Online Product Reservation System Administration Backend improper authenticationEPSS 0.6%CVE-2026-0578MEDIUMcode-projects Online Product Reservation System delete.php sql injectionEPSS 0.5%CVE-2026-0592MEDIUMcode-projects Online Product Reservation System User Registration register_code.php sql injectionEPSS 0.4%CVE-2026-0585MEDIUMcode-projects Online Product Reservation System GET Parameter order_view.php sql injectionEPSS 0.4%CVE-2026-0579MEDIUMcode-projects Online Product Reservation System POST Parameter edit.php sql injectionEPSS 0.4%CVE-2026-0576MEDIUMcode-projects Online Product Reservation System Parameter prod.php sql injectionEPSS 0.4%