CVE-2026-0585 | code-projects Online Product Reservation System 1.0 GET Parameter /order_view.php transaction_id sql injection

A vulnerability was found in code-projects Online Product Reservation System 1.0 and classified as critical. Impacted is an unknown function of the file /order_view.php of the component GET Parameter Handler. Such manipulation of the argument transaction_id leads to sql injection.

This vulnerability is documented as CVE-2026-0585. The attack can be executed remotely. Additionally, an exploit exists.