CVE-2026-6151: code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection
A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMERID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6151?
The severity of CVE-2026-6151 is rated as medium with a score of 5.5.
How do I fix CVE-2026-6151?
To fix CVE-2026-6151, validate and sanitize the input for the CUSTOMER_ID parameter to prevent SQL injection.
What type of vulnerability is CVE-2026-6151?
CVE-2026-6151 is a SQL injection vulnerability affecting the PaymentStatusFunction.php file.
Can CVE-2026-6151 be exploited remotely?
Yes, CVE-2026-6151 can be exploited remotely due to the lack of authentication and input validation.
What software is affected by CVE-2026-6151?
CVE-2026-6151 affects the Code-projects Vehicle Showroom Management System version 1.0.