CVE-2026-6183: code-projects Simple Content Management System index.php sql injection

Published Apr 13, 2026

Updated

A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Affected Software

1 affected component

Code-projects Simple Content Management System=1.0

Event History

Apr 5, 2026

Exploit Published

via GitHub·12:48 AM

Apr 13, 2026

CVE Published

via MITRE·02:45 PM

Data Sourced

via MITRE·02:45 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-6183?

CVE-2026-6183 has a medium severity rating due to its potential for SQL injection vulnerabilities.

How do I fix CVE-2026-6183?

To fix CVE-2026-6183, validate and sanitize all user inputs in the index.php file before processing them.

Which version of Code-projects Simple Content Management System is affected by CVE-2026-6183?

CVE-2026-6183 affects version 1.0 of Code-projects Simple Content Management System.

What type of vulnerability is CVE-2026-6183?

CVE-2026-6183 is classified as an SQL injection vulnerability.

Is there a way to mitigate the risks associated with CVE-2026-6183?

Yes, implementing parameterized queries and prepared statements can help mitigate the risks associated with CVE-2026-6183.