CVE-2026-0851: code-projects Online Music Site AdminAddUser.php sql injection
A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0851?
CVE-2026-0851 is classified as a critical vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2026-0851?
To fix CVE-2026-0851, use parameterized queries or prepared statements to sanitize inputs in the AdminAddUser.php file.
What software is affected by CVE-2026-0851?
CVE-2026-0851 affects Code-projects Online Music Site version 1.0.
Can CVE-2026-0851 be exploited remotely?
Yes, CVE-2026-0851 can be exploited remotely, allowing attackers to manipulate the txtusername argument.
What type of vulnerability is CVE-2026-0851?
CVE-2026-0851 is an SQL injection vulnerability that affects user input handling.