CVE-2026-5034 in code-projects Accounting System
Resumen (Inglés)
A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /edit_costumer.php of the component Parameter Handler. This manipulation of the argument cos_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Divulgación
2026-03-29
Voces
| Fecha de publicación | Base | Temp | Vulnerabilidad | CWE | Prod | Exp | Con | EPSS | CTI | CVE |
|---|---|---|---|---|---|---|---|---|---|---|
| 2026-03-27 | 7.3 | 6.6 | code-projects Accounting System Parameter edit_costumer.php inyección SQL | 89 | Accounting Software | Prueba de concepto | No está definido | 0.00030 | 2.13 | CVE-2026-5034 |