VulnSocial

CVE-2026-11490General

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-08); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-08: 1Mentions · 2026-06-09: 1PoC Mentioned / Linked · 2026-06-09: 1Patch / Workaround · 2026-06-09: 1Technical Details · 2026-06-09: 106-0806-09
Signal classification2 categories
General
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-081
General1
2026-06-091
PoC1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    PoC

    CVE-2026-11490 - SQLi in code-projects Online Music Site 1.0. /Frontend/Search.php Category param. Remote attack, public exploit. CVSS 7.3. No patch available. Mitigate immediately. #CVE #infosec #SQLi #developers More FREE #cybersecurity heaven: https://www.valtersit.com/cve/CVE-2026-11490

    Post summary

    CVE-2026-11490 is a publicly disclosed SQL injection vulnerability in code-projects Online Music Site 1.0 with a known exploit but no patch, urging immediate mitigation.

    0000042
    921 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-11490 A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation … https://www.cve.org/CVERecord?id=CVE-2026-11490

    Post summary

    The post merely cites CVE‑2026‑11490 with a brief, vague description and no additional actionable information.

    00000155
    57.6K followersView on X

Explore more

Back to dashboard