Online Product Reservation System vulnerabilities

3 known CVE vulnerabilities in Online Product Reservation System, translated and rated.

CVE-2026-0591Medium
A SQL injection vulnerability was identified in code-projects Online Product Reservation System 1.0 in the file /app/checkout/update.php. Manipulation of the id/qty arguments allows remote exploitation, and a public exploit may be used.
CVE-2026-0590Medium
A SQL injection vulnerability was determined in code-projects Online Product Reservation System 1.0 in the file /app/checkout/delete.php. Manipulation of the ID argument allows remote exploitation, and a public exploit may be used.
CVE-2026-0586Medium
A cross-site scripting (XSS) vulnerability was detected in code-projects Online Product Reservation System 1.0 in the file handgunner-administrator/prod.php. Manipulation of the cat argument allows remote exploitation, and a public exploit may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS