Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_music_site:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Music Site (075d6518-60e3-5160-9a97-158824aead1d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-13567 vulnerable 2026-07-29 00:23:33.186192 code-projects Online Music Site POST Request Feedback.php cross site scripting
MEDIUM (4.3)
A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-29T12:30:08.275Z
Updated: 2026-06-29T14:02:17.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11490 vulnerable 2026-07-29 00:23:31.258090 code-projects Online Music Site Search.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-06-08T05:00:13.474Z
Updated: 2026-06-09T14:48:27.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11489 vulnerable 2026-07-29 00:23:31.256893 code-projects Online Music Site AdminDeleteAlbum.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminDeleteAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2026-06-08T04:45:07.260Z
Updated: 2026-06-08T10:52:44.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7238 vulnerable 2026-06-08 08:07:05.550902 code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload
MEDIUM (4.7)
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. This manipulation of the argument txtimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Published: 2026-04-28T07:00:16.688Z
Updated: 2026-04-28T12:24:47.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2213 vulnerable 2026-06-08 07:55:16.723579 code-projects Online Music Site AdminAddAlbum.php unrestricted upload
MEDIUM (4.7)
A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminAddAlbum.php. The manipulation of the argument txtimage results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Published: 2026-02-09T03:32:07.034Z
Updated: 2026-02-23T09:56:05.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2212 vulnerable 2026-06-08 07:55:16.723213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2211 vulnerable 2026-06-08 07:55:16.722730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2133 vulnerable 2026-06-08 07:55:16.587417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2132 vulnerable 2026-06-08 07:55:16.585871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1535 vulnerable 2026-06-08 07:49:08.828462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1534 vulnerable 2026-06-08 07:49:08.828076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1533 vulnerable 2026-06-08 07:49:08.827690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1443 vulnerable 2026-06-08 07:49:08.593790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10178 vulnerable 2026-06-08 07:47:13.662284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10171 vulnerable 2026-06-08 07:47:13.658600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0852 vulnerable 2026-06-08 07:47:13.333020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0851 vulnerable 2026-06-08 07:47:13.332516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0607 vulnerable 2026-06-08 07:47:12.738400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0606 vulnerable 2026-06-08 07:47:12.737970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0605 vulnerable 2026-06-08 07:47:12.737582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0570 vulnerable 2026-06-08 07:47:12.545710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0569 vulnerable 2026-06-08 07:47:12.545320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0568 vulnerable 2026-06-08 07:47:12.544180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.