CVE-2026-6165

CWE-74CWE-89 — SQL Injection4 documents4 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 91.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Code-projects Vehicle Showroom Management System
Timeline
PublishedApr 13

Description

A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/Login_check.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-g4gg-273v-hrq5: A weakness has been identified in code-projects Vehicle Showroom Management System 1↗2026-04-13
▶
CVEList
code-projects Vehicle Showroom Management System Login_check.php sql injection↗2026-04-13
▶
VulDB
code-projects Vehicle Showroom Management System 1.0 /util/Login_check.php ID sql injection↗2026-04-12
▶
CVE-2026-6165 (MEDIUM CVSS 6.9) | A weakness has been identified in c | cvebase.io