CVE-2026-5034: code-projects Accounting System Parameter edit_costumer.php sql injection

Published Mar 29, 2026

Updated

A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /editcostumer.php of the component Parameter Handler. This manipulation of the argument cosid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Affected Software

2 affected components

Code-projects Accounting System=1.0

Sherlock Accounting System=1.0

Event History

Mar 29, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:16 AM

DescriptionSeverityWeaknessAffected Software

May 13, 58227

Event

via FIRST·02:19 AM

Frequently Asked Questions

What is the severity of CVE-2026-5034?

CVE-2026-5034 is classified as a high severity SQL injection vulnerability.

How do I fix CVE-2026-5034?

To fix CVE-2026-5034, you should sanitize and validate the 'cos_id' parameter in the edit_costumer.php file.

Which software is affected by CVE-2026-5034?

CVE-2026-5034 affects Code-Projects Accounting System version 1.0.

What type of vulnerability is CVE-2026-5034?

CVE-2026-5034 is a SQL injection vulnerability that allows attackers to manipulate database queries.

Can CVE-2026-5034 lead to data breach?

Yes, CVE-2026-5034 can potentially lead to unauthorized access to sensitive data due to SQL injection.