Login Request a demo
High severity · published Apr 27, 2026
CVE-2026-7070
code-projects Inventory Management System Login sql injection
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Inventory Management System · code-projects
1.0 · source: vendor
Affected product
IM
Inventory Management System
code-projects
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-7070
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-7070
code-projects.org
https://code-projects.org/
github.com
https://github.com/MyMySSS/CVE123/blob/main/cve/cve.md
vuldb.com
https://vuldb.com/submit/798696
vuldb.com
https://vuldb.com/vuln/359645
vuldb.com
https://vuldb.com/vuln/359645/cti
More from Inventory Management System
9.8
CVE-2025-6902
A vulnerability was found in code-projects Inventory Management System 1.0
9.8
CVE-2025-6901
A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical
9.8
CVE-2025-6891
A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0
9.8
CVE-2025-6834
A vulnerability was found in code-projects Inventory Management System 1.0
9.8
CVE-2025-6828
A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical