CVE-2026-0577: code-projects Online Product Reservation System prod.php unrestricted upload
A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0577?
The severity of CVE-2026-0577 has not been officially rated but it poses a significant risk due to unrestricted file uploads.
How do I fix CVE-2026-0577?
To fix CVE-2026-0577, implement strict validation of file uploads and restrict file types and sizes in the Online Product Reservation System.
What software is affected by CVE-2026-0577?
CVE-2026-0577 affects version 1.0 of the code-projects Online Product Reservation System.
Can CVE-2026-0577 be exploited remotely?
Yes, CVE-2026-0577 can be exploited remotely through the manipulation of the affected file /handgunner-administrator/prod.php.
What are the potential consequences of exploiting CVE-2026-0577?
Exploiting CVE-2026-0577 can lead to unauthorized access or control of the server through malicious file uploads.