CVE-2026-0851

Publication date

2026-01-11 23:32:07

Family

VulDB

State

PUBLISHED

Description

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.