CVE-2026-2211

A vulnerability was determined in code-projects Online Music Site 1.0. Affected is an unknown function of the file /Administrator/PHP/AdminDeleteCategory.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-74
• CWE-89
• CWE-89

• https://code-projects.org/Product
• https://github.com/yuji0903/silver-guide/issues/6Exploit, Issue Tracking
• https://vuldb.com/?ctiid.344927Permissions Required, VDB Entry
• https://vuldb.com/?id.344927Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.752597Third Party Advisory, VDB Entry

Published

Feb 9, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22099The charging station does not require authentication for Blu…8.7
• CVE-2026-2210A vulnerability has been found in D-Link DIR-823X 250416. Th…7.3
• CVE-2026-22100The OCPP DataTransfer message `ReserveLogin` is vulnerable t…8.6
• CVE-2026-22102A POST request sent to a specific webserver endpoint can be …9.3
• CVE-2026-22103The NPC start endpoint on the web server at port 8090 is vul…9.3
• CVE-2026-22104Improper access control in Hashtopolis server web-interface …7.1
• CVE-2026-2212A vulnerability was identified in code-projects Online Music…9.8
• CVE-2026-2213A security flaw has been discovered in code-projects Online …7.2
• CVE-2026-2214A weakness has been identified in code-projects for Plugin 1…4.8
• CVE-2026-2215A vulnerability was detected in rachelos WeRSS we-mp-rss up …3.7
• CVE-2026-22153An Authentication Bypass by Primary Weakness vulnerability […8.1
• CVE-2026-22154An improper neutralization of input during web page generati…5.4