CVE-2026-4836 in Accounting System
要約 (英語)
A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an unknown function of the file /my_account/delete.php. Performing a manipulation of the argument cos_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
公開
2026年03月26日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 353140 | code-projects Accounting System delete.php SQLインジェクション | 89 | 概念実証 | 未定義 | CVE-2026-4836 |