CVE-2026-5666

Medium CVSS: 5.5

A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be performed from remote. The exploit is now public and may be used.

Vendor

Product

CWE

CWE-200

Yayın Tarihi

2026-04-06 16:16:41

Güncelleme

2026-04-07 13:20:11

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-200 MEDIUM 2026

Referanslar

https://code-projects.org/ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20FIR%20System%20PHP%20Exposed%20Database%20Backup.md https://vuldb.com/submit/786322 https://vuldb.com/vuln/355489 https://vuldb.com/vuln/355489/cti