CVE-2026-6166: code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection
A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects some unknown processing of the file /util/UpdateVehicleFunction.php. The manipulation of the argument VEHICLEID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6166?
CVE-2026-6166 is classified as a critical SQL injection vulnerability.
How do I fix CVE-2026-6166?
To mitigate CVE-2026-6166, you should validate and sanitize all user inputs in the UpdateVehicleFunction.php file.
What systems are affected by CVE-2026-6166?
CVE-2026-6166 affects version 1.0 of the code-projects Vehicle Showroom Management System.
Can CVE-2026-6166 lead to data breaches?
Yes, CVE-2026-6166 can allow attackers to manipulate queries, potentially leading to data breaches.
Is there a patch available for CVE-2026-6166?
Currently, there is no official patch available for CVE-2026-6166, so immediate remediation is necessary.