CVE-2026-86180: code-projects Task Management System In PHP Login index.php sql injection
Published Sep 6, 2026
·Updated
A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Code-projects Task Management System In PHP=1.0
Event History
Sep 6, 2026
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need an account or user interaction to exploit this issue?
No. The vulnerability is rated as remotely exploitable with no privileges required and no user interaction required.
2
How urgent is remediation if the application is internet-accessible?
Prioritize remediation because exploitation can be initiated remotely and a public exploit has been disclosed. The reported impact includes low confidentiality, integrity, and availability effects.
3
Which version is identified as affected?
The reported affected version is code-projects Task Management System In PHP 1.0.