Is CVE-2026-85643 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85643?

CVE-2026-85643 has a CVSS v3 severity of MEDIUM (4.7).

Back

CVE-2026-85643

Description

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.