CVE-2026-5033 - Vulnerability Analysis

Overview

code-projects Accounting System 1.0 contains a sql injection caused by manipulation of the "cos_id" argument in /view_costumer.php Parameter Handler, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version.

References

• https://github.com/Xu-Zhihan/CVE/issues/6
• https://vuldb.com/submit/778589
• https://vuldb.com/vuln/353959
• https://vuldb.com/vuln/353959/cti
• https://code-projects.org/

Social Media Activity(1 post)

Offensive Sequence

@offseq

Mar 29, 2026

🚨 CVE-2026-5033 (MEDIUM): SQL injection in code-projects Accounting System 1.0 (/view_costumer.php, cos_id) is being actively exploited. Remote risk — monitor and patch as soon as fixes arrive. More: https://radar.offseq.com/threat/cve-2026-5033-sql-injection-in-code-projects-accou-9e1a8bbd #OffSeq #SQLInjection #VulnResearch

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner