Description

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Related CPE's

a

fabian

online_product_reservation_system

1.0

Vulnerable

References

https://code-projects.org/

Product

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_login.php.md

ExploitThird Party Advisory

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_login.php.md#poc

ExploitThird Party Advisory

https://vuldb.com/?ctiid.339475

Permissions RequiredVDB Entry

https://vuldb.com/?id.339475

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.731093

Third Party AdvisoryVDB Entry

Weaknesses

[email protected]

Primary
CWE-74CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

7.3 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-05T10:15:58.270Z

1 week ago

Last modified

2026-01-09T14:35:12.440Z

6 days ago