CVE-2026-0583: code-projects Online Product Reservation System User Login login.php sql injection
A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0583?
CVE-2026-0583 has been classified as a high severity vulnerability due to its potential for sql injection.
How do I fix CVE-2026-0583?
To fix CVE-2026-0583, ensure to sanitize user inputs in the emailadd argument in app/user/login.php to prevent sql injection.
What components are affected by CVE-2026-0583?
CVE-2026-0583 affects the User Login component of the Code-projects Online Product Reservation System 1.0.
Can CVE-2026-0583 be exploited remotely?
Yes, CVE-2026-0583 can be exploited remotely, allowing attackers to perform sql injection attacks.
What version of the software is vulnerable to CVE-2026-0583?
CVE-2026-0583 affects version 1.0 of the Code-projects Online Product Reservation System.