CVE-2026-0579: code-projects Online Product Reservation System POST Parameter edit.php sql injection
A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prodid/name/price/model/serial results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0579?
The severity of CVE-2026-0579 is classified as critical due to the potential for SQL injection.
How do I fix CVE-2026-0579?
To fix CVE-2026-0579, validate and sanitize all user inputs in the POST parameters to prevent SQL injection.
What components are affected by CVE-2026-0579?
CVE-2026-0579 affects the POST Parameter Handler in the /handgunner-administrator/edit.php file of the Online Product Reservation System.
What type of vulnerability is CVE-2026-0579?
CVE-2026-0579 is an SQL injection vulnerability that allows attackers to manipulate database queries.
What products are impacted by CVE-2026-0579?
CVE-2026-0579 impacts the Online Product Reservation System by code-projects.