VULNERABILITY INTELLIGENCE

CVE-2026-61519

CVSS score8.8 HIGH

EPSS probability0.25%

CISA KEVNot currently listed

Published2026-09-29

Last modified2026-09-30

Description

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMER_ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.