Beveiligingsadvies

CVE-2026-0579

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-04 12:32:07
Laatst bijgewerkt 2026-02-23 08:12:35
Toegewezen door VulDB
CVSS-score 7.5
Status PUBLISHED

Beschrijving

A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prod_id/name/price/model/serial results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.