CVE-2026-1422

CWE-74CWE-89 — SQL Injection3 documents3 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 97.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Online Examination SystemFabian Online Examination System
Timeline
PublishedJan 26

Description

A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
code-projects Online Examination System Login Page index.php sql injection↗2026-01-26
▶
GHSA
GHSA-pmjm-5f5h-7776: A vulnerability was found in code-projects Online Examination System 1↗2026-01-26
▶
CVE-2026-1422 (MEDIUM CVSS 6.9) | A vulnerability was found in code-p | cvebase.io