Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2026-11490: Code-projects Online Music Site 1.0 SQL Injection in Search Function
CVE-2026-11490 · published 4 months ago
Summary
A security issue affects the search function on code-projects Online Music Site 1.0. This means that an attacker could potentially manipulate the search results to gain unauthorized access to sensitive information. To protect your users and data, update to the latest version of the software or apply the recommended fix.
Original advisory text
A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes...
A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-74Injection
CWE-89SQL Injection
Timeline
Published8 Jun 2026
Updated3 Nov 2026
First seen8 Jun 2026
Sources
CVE-2026-11490 · NVD
Track software like this
Free during beta