CVE-2026-6183

HIGH

code-projects Simple Content Management System index.php sql injection

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-6183. PoCs published by Xmyronn.

AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2026-6183, a SQL injection vulnerability in Simple Content Management System PHP. It includes a proof-of-concept payload and screenshots demonstrating the exploitation of the 'id' parameter in index.php.

Description

A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Exploits (1)

nomisec WRITEUP
by Xmyronn · poc
https://github.com/Xmyronn/CVE-2026-6183-SQLI

This repository provides a detailed technical analysis of CVE-2026-6183, a SQL injection vulnerability in Simple Content Management System PHP. It includes a proof-of-concept payload and screenshots demonstrating the exploitation of the 'id' parameter in index.php.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Simple Content Management System PHP version 1.0
No auth needed
Prerequisites: Access to the target web application
devstral-2 · analyzed Apr 13, 2026 Full analysis →

References (5)

Core 5
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-357106 | code-projects Simple Content Management System index.php sql injection
https://vuldb.com/vuln/357106
Signature, Permissions Required signature permissions-required
VDB-357106 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/357106/cti
Third Party Advisory third-party-advisory
Submit #797264 | code-projects.org Simple Content Management System in php 1.0 SQL Injection
https://vuldb.com/submit/797264
Product product
https://code-projects.org/

Scores

CVSS v3 7.3
EPSS 0.0031
EPSS Percentile 22.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
code-projects/Simple Content Management System 1.0
Published Apr 13, 2026
Tracked Since Apr 13, 2026