CVE-2026-5035: code-projects Accounting System Parameter view_work.php sql injection

Published Mar 29, 2026

Updated

A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /viewwork.php of the component Parameter Handler. Such manipulation of the argument enid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Code-Projects Accounting System=1.0

Sherlock Accounting System=1.0

Event History

Mar 29, 2026

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Nov 28, 58273

Event

via FIRST·12:49 PM

Frequently Asked Questions

What is the severity of CVE-2026-5035?

CVE-2026-5035 is considered a high severity vulnerability due to its potential for SQL injection.

How do I fix CVE-2026-5035?

To resolve CVE-2026-5035, it is recommended to sanitize and validate user inputs in the view_work.php file.

What component is affected by CVE-2026-5035?

CVE-2026-5035 affects the Parameter Handler component in the Code-Projects Accounting System.

Which version of the software is vulnerable for CVE-2026-5035?

CVE-2026-5035 affects version 1.0 of the Code-Projects Accounting System.

What type of attack is associated with CVE-2026-5035?

CVE-2026-5035 is associated with SQL injection attacks through the en_id parameter.