CVE-2026-0584: code-projects Online Product Reservation System left_cart.php sql injection
A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/leftcart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0584?
CVE-2026-0584 has a severity that can lead to remote SQL injection attacks.
How do I fix CVE-2026-0584?
To fix CVE-2026-0584, sanitize and validate the 'ID' input to prevent SQL injection.
What software is affected by CVE-2026-0584?
CVE-2026-0584 affects the Online Product Reservation System version 1.0 by Code-projects.
Can CVE-2026-0584 be exploited remotely?
Yes, CVE-2026-0584 can be exploited remotely due to the SQL injection vulnerability.
What component of the software is vulnerable in CVE-2026-0584?
The vulnerable component in CVE-2026-0584 is the file app/products/left_cart.php.