A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.p…

Published:

11 januari 2026 om 23:00:00

Alert date:

12 januari 2026 om 01:00:56

Source:

nvd.nist.gov

CVE-2026-0851 identifies a SQL injection vulnerability in code-projects Online Music Site 1.0. The vulnerability affects the AdminAddUser.php file where manipulation of the txtusername parameter leads to SQL injection. The attack can be exploited remotely and the exploit is publicly available, making it a significant security risk for affected installations.

Technical details

Mitigation steps:

Affected products:

code-projects Online Music Site 1.0