CNNVD-202602-1373 Information

Feb 09, 2026 cve

CNNVD ID

CNNVD-202602-1373

CVE-2026-2214

CNNVD Published: 2026-02-09

Description (Chinese)

Code-Projects Online Music Site是Code-Projects开源的一个在线音乐网站。 Code-Projects Online Music Site 1.0版本存在代码注入漏洞，该漏洞源于对文件/Administrator/PHP/AdminAddAlbum.php中参数txtalbum的错误操作，可能导致跨站脚本攻击。

Description (English)

Code-Projects Online Music Site is an open-source online music site for Code-Projects. The Code-Project Online Music Site 1.0 contains a code-injection loophole that stems from an error in the txtalbum parameter in document/Administrator/PHP/AdminAddAlbum.php, which may result in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

Code-Projects

Published

2026-02-09

Last Modified

2026-02-24

References

https://github.com/yuji0903/silver-guide/issues/9 https://vuldb.com/?submit.752602 https://vuldb.com/?ctiid.344930 https://code-projects.org/ https://vuldb.com/?id.344930 https://access.redhat.com/security/cve/cve-2026-2214

Share on: