CVE-2026-0565: code-projects Content Management System delete.php sql injection
A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0565?
CVE-2026-0565 has been identified as a severe vulnerability due to its potential for SQL injection, allowing for remote exploitation.
How do I fix CVE-2026-0565?
To fix CVE-2026-0565, ensure that input validation is implemented for the 'del' argument in the /admin/delete.php file to prevent SQL injection.
What software is affected by CVE-2026-0565?
CVE-2026-0565 affects version 1.0 of the code-projects Content Management System.
Can CVE-2026-0565 be exploited remotely?
Yes, CVE-2026-0565 can be exploited remotely by manipulating the argument in the affected file.
What type of vulnerability is CVE-2026-0565?
CVE-2026-0565 is classified as an SQL injection vulnerability due to improper handling of the input parameter.