CVE-2026-75778: code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-18 · updated 2026-10-22
Weakness: CWE-74

Description

A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Affected products

code-projects Task Management System: 1.0

References

https://code-projects.org/
https://github.com/niaoniaollll/cve/issues/5
https://vuldb.com/cve/CVE-2026-75778
https://vuldb.com/submit/877771
https://vuldb.com/vuln/391521
https://vuldb.com/vuln/391521/cti

Get alerted when CVE-2026-75778 or the next vulnerability affects your stack