PT-2026-4815 · Code Projects · Code-Projects Online Music Site

M202372062

·

CVE-2026-1443

·

Published

2026-01-26

·

Updated

2026-01-26

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0
Description A flaw exists in code-projects Online Music Site version 1.0, specifically within the file /Administrator/PHP/AdminDeleteUser.php. Manipulation of the ID argument can lead to SQL injection. This issue is remotely exploitable and an exploit has been published. The affected functionality is currently unknown.
Recommendations Apply any available updates or patches for code-projects Online Music Site version 1.0. As a temporary workaround, restrict access to the file /Administrator/PHP/AdminDeleteUser.php. Sanitize the ID parameter before using it in any database queries.

Exploit

Fix

SQL injection

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89CWE-74

Related Identifiers

CVE-2026-1443

Affected Products

Code-Projects Online Music Site