CVE-2026-0851

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

• CWE-74
• CWE-89

• https://code-projects.org/Product
• https://github.com/tuo159515/sql-injection/issues/2Exploit, Issue Tracking
• https://vuldb.com/?ctiid.340446Permissions Required, VDB Entry
• https://vuldb.com/?id.340446Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.733644Third Party Advisory, VDB Entry

Published

Jan 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0845The WCFM – Frontend Manager for WooCommerce along with Booki…7.2
• CVE-2026-0846A vulnerability in the `filestring()` function of the `nltk.…7.5
• CVE-2026-0847A vulnerability in NLTK versions up to and including 3.9.2 a…7.5
• CVE-2026-0848NLTK versions <=3.9.2 are vulnerable to arbitrary code execu…10
• CVE-2026-0849Malformed ATAES132A responses with an oversized length field…6.8
• CVE-2026-0850A vulnerability was determined in code-projects Intern Membe…7.2
• CVE-2026-0852A security flaw has been discovered in code-projects Online …9.8
• CVE-2026-0853Certain NVR models developed by A-Plus Video Technologies ha…6.9
• CVE-2026-0854Certain DVR/NVR models developed by Merit LILIN has a OS Com…8.8
• CVE-2026-0855Certain IP Camera models developed by Merit LILIN has a OS C…8.8
• CVE-2026-0856Improper Access Control vulnerability in Mesalvo MEONA (MEON…7.8
• CVE-2026-0857Use of a Password Hash With Insufficient Computational Effor…4.4