CVE-2026-0577
A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used.
Vendor
Product
CWE
Yayın Tarihi
2026-01-04 10:15:41
Güncelleme
2026-02-23 09:16:32
Source Identifier
cna@vuldb.com
KEV Date Added
-
Kategoriler
Referanslar
https://code-projects.org/
https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/file_upload_prod.php.md
https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/file_upload_prod.php.md#poc
https://vuldb.com/?ctiid.339461
https://vuldb.com/?id.339461
https://vuldb.com/?submit.731015