A vulnerability, which was classified as critical, has been found in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection.
This vulnerability is listed as CVE-2026-5646. The attack may be initiated remotely. In addition, an exploit is available.
