CVE-2026-2133

CRITICAL 9.8CVE-2026-2133 · Published 08/02/2026 · updated 17/06/2026

Package	Affected versions	Patched versions
online music site fabian	`= 1.0`	No fix yet

Description

A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCategory.php. This manipulation of the argument txtimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

References

code-projects.org · Product
Volije/cve2 · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free