CVE-2026-0852

creationtimestamp| type| source ---|---|--- 2026-01-12 01:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc6vxfwmnt2x 2026-01-12 02:00:13+00:00| published-proof-of-concept| Telegram/-5IQFk-keMFoclwYECtcL328FxAlxbva95vIG7QULZn48...

CVE-2026-0852 code-projects Online Music Site AdminUpdateUser.php sql injection

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...