CVE-2026-2176

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem[0] leads to sql injection. The attack can be executed remotely.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
code-projects	Contact Management System	1.0

References

https://code-projects.org/Product
https://vuldb.com/?ctiid.344877Permissions Required, VDB Entry
https://vuldb.com/?id.344877Third Party Advisory, VDB Entry
https://vuldb.com/?submit.749264Third Party Advisory, VDB Entry

Timeline

Published: Feb 8, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-217604.6HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks CVE-2026-217615.4HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized c CVE-2026-217625.3HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-bas CVE-2026-217644.3HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result CVE-2026-217657.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows CVE-2026-217665.4The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Under certain very CVE-2026-217673.3HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the applicat CVE-2026-217686.3The compose-rich-editor library (v1.0.0-rc14) used in HCL Verse for Android's rich text email composition fails to properly validate all HTM CVE-2026-21777.3A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component CVE-2026-217706.5HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace CVE-2026-21788.8A vulnerability was found in r-huijts xcode-mcp-server up to f3419f00117aa9949e326f78cc940166c88f18cb. This affects the function registerXco CVE-2026-217834.3HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed informati