CVE-2026-2211: code-projects Online Music Site AdminDeleteCategory.php sql injection
A vulnerability was determined in code-projects Online Music Site 1.0. Affected is an unknown function of the file /Administrator/PHP/AdminDeleteCategory.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2211?
CVE-2026-2211 is classified as a medium severity vulnerability due to its potential for SQL injection exploitation.
How do I fix CVE-2026-2211?
To fix CVE-2026-2211, implement proper input validation and prepared statements to prevent SQL injection in the AdminDeleteCategory.php file.
What is the vector of attack for CVE-2026-2211?
The vector of attack for CVE-2026-2211 involves manipulating the 'ID' parameter in the AdminDeleteCategory.php file.
Which software is affected by CVE-2026-2211?
CVE-2026-2211 affects Code-projects Online Music Site version 1.0.
What are the potential impacts of exploiting CVE-2026-2211?
Exploiting CVE-2026-2211 could allow an attacker to execute arbitrary SQL queries, potentially leading to data exposure or modification.