CVE-2026-0584

CWE-74CWE-89 — SQL Injection3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 84.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Online Product Reservation SystemFabian Online Product Reservation System
Timeline
PublishedJan 5

Description

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/left_cart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
code-projects Online Product Reservation System left_cart.php sql injection↗2026-01-05
▶
GHSA
GHSA-r58x-79pj-f5rc: A weakness has been identified in code-projects Online Product Reservation System 1↗2026-01-05
▶
CVE-2026-0584 (MEDIUM CVSS 5.3) | A weakness has been identified in c | cvebase.io