CVE-2026-9584
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Risk Assessment
An attacker can remotely bypass authentication and manipulate the project management system database, potentially leading to data leakage or takeover.
Recommendation
Immediately update the Project Management System or apply a patch to prevent SQL injection.
Other vulnerabilities in Project Management System
Original NVD description (English source)
A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.