EUVD-2026-32004CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionNVD
A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
AnalysisAI
SQL injection in code-projects Project Management System 1.0 allows remote unauthenticated attackers to manipulate database queries through the login handler (chk.php). The flaw stems from unsanitized input being passed into a SQL statement, enabling authentication-context query tampering and data disclosure. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Remove code-projects 1.0 from production or isolate it behind network access controls restricted to internal staff; deploy Web Application Firewall (WAF) rules to block SQL injection patterns in the login endpoint (chk.php). Within 7 days: Enable rate limiting and account lockout policies on authentication attempts; configure audit logging for all database access attempts; scan application logs for exploitation signatures. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today