CVE-2026-0583 — Injection in Online Product Reservation System

CWE-74 — Injection CWE-89 — SQL Injection3 documents3 sources

Severity

6.9MEDIUMNVD

EPSS

0.1%

top 82.72%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Code-projects Online Product Reservation System Fabian Online Product Reservation System

Timeline

PublishedJan 5

Description

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5code-projects/online_product_reservation_system1.0

▶NVDfabian/online_product_reservation_system1.0

🔴Vulnerability Details

GHSA

GHSA-8w44-rx65-php7: A security flaw has been discovered in code-projects Online Product Reservation System 1↗2026-01-05

▶

CVEList

code-projects Online Product Reservation System User Login login.php sql injection↗2026-01-05

▶