CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-01-05
code-projects Online Product Reservation System 1.0 register_code.php SQL Injection Vulnerability (CVE-2026-0592)
[Affected Scope] code-projects Online Product Reservation System 1.0, specifically the /handgunner-administrator/register_code.php component
[Impact] Unauthenticated remote attackers can manipulate user registration parameters to execute arbitrary SQL commands, leading to full database compromise and potential remote code execution
[Mitigation] Implement parameterized queries (Prepared Statements) for all user inputs and restrict access to the registration endpoint using WAF or web server configurations