CVE-2026-19921

EUVD-2026-59811
A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument cat_id leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 10.24%
Common Weakness Enumeration
References
https://code-projects.org/
https://github.com/zzzxc643/CVE1/blob/main/online-shopping-system/vul3.md
https://vuldb.com/cve/CVE-2026-19921
https://vuldb.com/submit/871813
https://vuldb.com/vuln/390171
https://vuldb.com/vuln/390171/cti