CVE-2026-0576: code-projects Online Product Reservation System Parameter prod.php sql injection
A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0576?
CVE-2026-0576 has been classified as a medium severity vulnerability due to SQL injection risks.
How do I fix CVE-2026-0576?
To fix CVE-2026-0576, validate and sanitize all user inputs, particularly the cat, price, name, model, and serial parameters.
What systems are affected by CVE-2026-0576?
CVE-2026-0576 affects the Code-projects Online Product Reservation System version 1.0.
Can CVE-2026-0576 lead to data compromise?
Yes, CVE-2026-0576 can potentially allow attackers to execute unauthorized SQL commands, leading to data compromise.
What are the potential impacts of exploiting CVE-2026-0576?
Exploiting CVE-2026-0576 may allow attackers to retrieve, modify, or delete sensitive information in the database.