CVE-2026-0606: code-projects Online Music Site Albums.php sql injection
A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0606?
CVE-2026-0606 has a critical severity level due to the potential for remote SQL injection attacks.
How does CVE-2026-0606 occur?
CVE-2026-0606 occurs when the argument ID in the /FrontEnd/Albums.php file is manipulated, allowing SQL injection.
Who is affected by CVE-2026-0606?
Users of the code-projects Online Music Site version 1.0 are affected by CVE-2026-0606.
How do I fix CVE-2026-0606?
To fix CVE-2026-0606, validate and sanitize user inputs in the affected application to prevent SQL injection.
Can CVE-2026-0606 be exploited remotely?
Yes, CVE-2026-0606 can be exploited remotely, making it a significant security risk.