CVE-2026-0590: code-projects Online Product Reservation System POST Parameter delete.php sql injection
A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0590?
CVE-2026-0590 is classified as a critical severity vulnerability that allows attackers to perform SQL injection.
How do I fix CVE-2026-0590?
To fix CVE-2026-0590, you should sanitize and validate all inputs passed to the POST Parameter Handler to prevent SQL injection.
What software is affected by CVE-2026-0590?
CVE-2026-0590 affects the Online Product Reservation System version 1.0 developed by Code-projects.
What type of attack does CVE-2026-0590 enable?
CVE-2026-0590 enables attackers to execute SQL injection attacks through manipulation of the ID parameter in the checkout delete function.
Can CVE-2026-0590 be exploited remotely?
Yes, CVE-2026-0590 can be exploited remotely by attackers who can send crafted requests to the vulnerable application.