CVE-2026-5805: code-projects Easy Blog Site contact_us.php sql injection
A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5805?
CVE-2026-5805 is classified as a high severity vulnerability due to the potential for SQL injection attacks.
How do I fix CVE-2026-5805?
To fix CVE-2026-5805, you should validate and sanitize all input fields, particularly the 'Name' argument in contact_us.php.
What software is affected by CVE-2026-5805?
CVE-2026-5805 affects the Code-Projects Easy Blog Site, specifically versions up to and including 1.0.
What kind of attack can be executed through CVE-2026-5805?
CVE-2026-5805 allows attackers to perform SQL injection attacks that can manipulate database queries.
Is CVE-2026-5805 a remote or local vulnerability?
CVE-2026-5805 is primarily a remote vulnerability as it can be exploited over the network by sending specially crafted requests.