High severity · published Apr 13, 2026
CVE-2026-6165
code-projects Vehicle Showroom Management System Login_check.php sql injection
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
A weakness has been identified in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/Login_check.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VS
Vehicle Showroom Management System · code-projects
1.0 · source: vendor
Affected product
VS
Vehicle Showroom Management System
code-projects
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-6165
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-6165
code-projects.org
https://code-projects.org/
github.com
https://github.com/realnotjoking/cve/issues/2
vuldb.com
https://vuldb.com/submit/797090
vuldb.com
https://vuldb.com/vuln/357053
vuldb.com
https://vuldb.com/vuln/357053/cti
More from Vehicle Showroom Management System
7.3
CVE-2026-6166
code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection
7.3
CVE-2026-6153
code-projects Vehicle Showroom Management System StaffDetailsFunction.php sql injection
7.3
CVE-2026-6152
code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection
7.3
CVE-2026-6151
code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection
7.3
CVE-2026-6149
code-projects Vehicle Showroom Management System BookVehicleFunction.php sql injection