CVE-2026-7131

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. The impacted element is an unknown function of the file /loginuser.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 27, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-713105.9rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTCVE-2026-713116.4rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, a valid but nCVE-2026-713128.0rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interCVE-2026-713136.9rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, thCVE-2026-713147.5Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a serveCVE-2026-713158.2Nuxt is an open-source web development framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to matCVE-2026-713167.5Nuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cache:nuxt:payload entries for /<page>/_payloadCVE-2026-713176.5Lemur manages TLS certificate creation. Prior to 1.9.3, POST /api/1/authorities with type=subca did not require AuthorityPermission on the pCVE-2026-713184.8Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an attacker can supply a top-level `as` proCVE-2026-713199.6Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RCVE-2026-71325.3A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile of the file /downloadCVE-2026-713208.1Nuxt is an open-source web development framework for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a template key throu