CVE-2026-1534mediumCWE-74CWE-89

CVE-2026-1534: falha de média gravidade em code-projects Online Music Site

code-projects Online Music Site AdminEditUser.php sql injection

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Online Music Site

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.5%
A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Online Music Site
CVEs relacionadas — code-projects Online Music Site

No mesmo produto, das mais perigosas para as menos.

CVE-2026-1443MEDIUMcode-projects Online Music Site AdminDeleteUser.php sql injectionEPSS 0.6%CVE-2026-13567MEDIUMcode-projects Online Music Site POST Request Feedback.php cross site scriptingEPSS 0.5%CVE-2026-2133MEDIUMcode-projects Online Music Site AdminUpdateCategory.php unrestricted uploadEPSS 0.5%CVE-2026-1535MEDIUMcode-projects Online Music Site AdminReply.php sql injectionEPSS 0.5%CVE-2026-0606MEDIUMcode-projects Online Music Site Albums.php sql injectionEPSS 0.5%CVE-2026-0607MEDIUMcode-projects Online Music Site AdminViewSongs.php sql injectionEPSS 0.4%