CVE-2026-5666mediumCWE-200CWE-922

CVE-2026-5666: medium-severity vulnerability in code-projects Online FIR System

code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information

Published · Updated

Follow this CVE+ Monitor Online FIR System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.3%
A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be performed from remote. The exploit is now public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Online FIR System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — code-projects Online FIR System

In the same product, most dangerous first.

CVE-2024-0503LOWcode-projects Online FIR System registercomplaint.php cross site scriptingEPSS 0.6%CVE-2026-5665MEDIUMcode-projects Online FIR System Login checklogin.php sql injectionEPSS 0.3%