Online Music Site vulnerabilities
5 known CVE vulnerabilities in Online Music Site, translated and rated.
- CVE-2026-13567Medium
A cross-site scripting vulnerability has been discovered in code-projects Online Music Site 1.0 in the file /Frontend/Feedback.php. Manipulation of the fname, femail, faddress, or fmessage arguments allows remote injection of malicious scripts.
- CVE-2026-11490High
Online Music Site 1.0 by code-projects has a SQL Injection vulnerability in /Frontend/Search.php via the Category argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-10178High
An SQL injection vulnerability was found in code-projects Online Music Site 1.0 in the file /Administrator/PHP/AdminEditAlbum.php via the ID argument. The attack can be executed remotely and the exploit is publicly available.
- CVE-2026-10171Medium
Vulnerability in code-projects Online Music Site 1.0 allows SQL Injection by manipulating the ID argument in the file /Administrator/PHP/AdminUpdateAlbum.php.
- CVE-2026-7238Medium
code-projects Online Music Site 1.0 has a vulnerability in /Administrator/PHP/AdminUpdateAlbum.php where manipulation of the txtimage argument leads to unrestricted upload. Remote exploitation is possible, and the exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS