CVE-2026-2132

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Feb 8, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-213207.8After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the CVE-2026-213217.8After Effects versions 25.6 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code CVE-2026-213227.8After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result CVE-2026-213237.8After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the CVE-2026-213247.8After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result CVE-2026-213257.8After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result CVE-2026-213267.8After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the CVE-2026-213277.8After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i CVE-2026-213287.8After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i CVE-2026-213297.8After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the CVE-2026-21339.8A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminU CVE-2026-213307.8After Effects versions 25.6 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that