CVE-2026-5666— code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-5666
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be performed from remote. The exploit is now public and may be used.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
敏感信息的不安全存储
Source: NVD (National Vulnerability Database)
Vulnerability Title
Code-Projects Online FIR System 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Code-Projects Online FIR System是Code-Projects开源的一个在线FIR系统。 code-projects Online FIR System 1.0版本存在安全漏洞，该漏洞源于SQL数据库备份文件处理组件中/complaints.sql文件的不安全存储，可能导致敏感信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| code-projects | Online FIR System | 1.0 | - |
II. Public POCs for CVE-2026-5666
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-5666
请登录查看更多情报信息。
Same Patch Batch · code-projects · 2026-04-06 · 9 CVEs total
| CVE-2026-5646 | 7.3 HIGH | code-projects Easy Blog Site login.php sql injection |
| CVE-2026-5648 | 7.3 HIGH | code-projects Simple Laundry System Parameter userfinishregister.php sql injection |
| CVE-2026-5665 | 7.3 HIGH | code-projects Online FIR System Login checklogin.php sql injection |
| CVE-2026-5672 | 7.3 HIGH | code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection |
| CVE-2026-5649 | 6.3 MEDIUM | code-projects Online Application System for Admission Endpoint admsnform.php sql injection |
| CVE-2026-5650 | 5.3 MEDIUM | code-projects Online Application System for Admission oas.sql sensitive information |
| CVE-2026-5705 | 4.3 MEDIUM | code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting |
| CVE-2026-5647 | 2.4 LOW | code-projects Online Shoe Store Add Product admin_feature.php cross site scripting |
IV. Related Vulnerabilities
Same vendor: code-projects
- CVE-2026-8125
code-projects Simple Chat System sendMessage.php sql injecti - CVE-2026-8098
code-projects Feedback System checklogin.php sql injection - CVE-2026-7732
code-projects BloodBank Managing System request_blood.php un - CVE-2026-7731
code-projects BloodBank Managing System get_state.php sql in - CVE-2026-7716
code-projects Gym Management System In PHP/Windows NT index.
Same weakness: CWE-922
- CVE-2026-40868
kyverno apicall servicecall implicit bearer token injection - CVE-2026-26152
Microsoft Cryptographic Services Elevation of Privilege Vuln - CVE-2026-5650
code-projects Online Application System for Admission oas.sq - CVE-2025-10734
ReviewX – WooCommerce Product Reviews with Multi-Criteria, R - CVE-2025-10464
Cleartext password storage in Birtech Information Technologi
V. Comments for CVE-2026-5666
No comments yet