CVE-2026-0566: code-projects Content Management System edit_posts.php unrestricted upload
A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/editposts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0566?
CVE-2026-0566 is considered a high severity vulnerability due to its potential for unrestricted file uploads.
How do I fix CVE-2026-0566?
To remediate CVE-2026-0566, sanitize and validate file uploads in the /admin/edit_posts.php function to prevent unauthorized access.
What impact does CVE-2026-0566 have on the system?
CVE-2026-0566 allows attackers to upload malicious files remotely, posing a significant security risk.
Which software versions are affected by CVE-2026-0566?
CVE-2026-0566 affects the Code-projects Content Management System version 1.0.
Can CVE-2026-0566 be exploited remotely?
Yes, CVE-2026-0566 can be exploited remotely, allowing attackers to target vulnerable installations over the internet.