CVE-2026-0576

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
code-projects	Online Product Reservation System	1.0

References

https://code-projects.org/Product
https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_add_prod.php.mdExploit, Third Party Advisory
https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_add_prod.php.md#pocExploit, Third Party Advisory
https://vuldb.com/?ctiid.339460Permissions Required, VDB Entry
https://vuldb.com/?id.339460Third Party Advisory, VDB Entry
https://vuldb.com/?submit.731012Third Party Advisory, VDB Entry

Timeline

Published: Jan 4, 2026
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-05779.8A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of CVE-2026-05789.8A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality CVE-2026-05799.8A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-admin CVE-2026-05806.1A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the compo CVE-2026-05819.8A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/B CVE-2026-05829.8A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_CVE-2026-05839.8A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the f CVE-2026-05849.8A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the fil CVE-2026-05859.8A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the fi CVE-2026-05866.1A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file CVE-2026-05875.4A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file rock_page_gong.php of CVE-2026-05886.1A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functionality of the file