CVE-2026-0606 in Online Music Site

Zusammenfassung

von MITRE • 06.01.2026

A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Zuständig: VulDB
• Veröffentlichung: 06.01.2026
• Moderieren: akzeptiert
• Eintrag: VDB-339550
• CPE: bereit
• CWE: CWE-89 (bestätigt)
• Exploit: Download
• CVSS: 9.8 (NVD)
• EPSS: 0.00026
• KEV: nein
• Aktivitäten: very low
• Sektor: Finance, Telecommunication, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-0606
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0606
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-0606/