CVE-2026-5555: code-projects Concert Ticket Reservation System Parameter login.php sql injection

Published Apr 5, 2026

Updated

A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

Affected Software

1 affected component

Code-projects Concert Ticket Reservation System=1.0

Event History

Apr 5, 2026

CVE Published

via MITRE·09:15 AM

Data Sourced

via MITRE·09:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 AM

DescriptionSeverityWeakness

Feb 26, 58532

Event

via NVD·11:50 PM

Frequently Asked Questions

What is the severity of CVE-2026-5555?

CVE-2026-5555 has a critical severity level due to the potential for SQL injection vulnerabilities.

How do I fix CVE-2026-5555?

To fix CVE-2026-5555, validate and sanitize user inputs in the login.php file to prevent SQL injection.

What software is affected by CVE-2026-5555?

CVE-2026-5555 affects the Concert Ticket Reservation System version 1.0.

What type of vulnerability is CVE-2026-5555?

CVE-2026-5555 is an SQL injection vulnerability exploiting the parameter handling in the login.php file.

Does CVE-2026-5555 allow for unauthorized access?

Yes, CVE-2026-5555 can allow attackers to execute arbitrary SQL commands, potentially leading to unauthorized access.