Security Advisory

CVE-2026-19920

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-15 23:45:09
Last updated 2026-08-17 17:23:01
Assigner VulDB
CVSS score 6.5
State PUBLISHED

Description

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.