CVE-2026-2176

A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem[0] leads to sql injection. The attack can be executed remotely.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cna@vuldb.com

Published

2026-02-08

Last modified

2026-02-23

Weaknesses

CWE-74, CWE-89

Affected products

• Contact Management System (Code-projects)
• Contact Management System (Fabian)

References

• https://code-projects.org/
• https://vuldb.com/?ctiid.344877
• https://vuldb.com/?id.344877
• https://vuldb.com/?submit.749264