CVE-2026-7131

HIGH

code-projects Online Lot Reservation System loginuser.php sql injection

Title source: cna
STIX 2.1

Description

A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. The impacted element is an unknown function of the file /loginuser.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References (5)

Scores

CVSS v3 7.3
EPSS 0.0003
EPSS Percentile 8.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-74 CWE-89
Status published
Products (1)
code-projects/Online Lot Reservation System 1.0
Published Apr 27, 2026
Tracked Since Apr 27, 2026