A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUse…

Published:

25 januari 2026 om 23:00:00

Alert date:

26 januari 2026 om 21:02:17

Source:

nvd.nist.gov

Web Technologies

A SQL injection vulnerability has been discovered in code-projects Online Music Site version 1.0. The flaw affects the /Administrator/PHP/AdminDeleteUser.php file where manipulation of the ID argument leads to SQL injection. The vulnerability can be exploited remotely and proof-of-concept exploit code has been publicly released, making it actively exploitable by attackers.

Technical details

Mitigation steps:

Affected products:

Online Music Site 1.0