CVE-2026-5666: code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-06 · updated 2026-10-24
Weakness: CWE-200

Description

A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be performed from remote. The exploit is now public and may be used.

Affected products

code-projects Online FIR System: 1.0

References

https://code-projects.org/
https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20FIR%20System%20PHP%20Exposed%20Database%20Backup.md
https://vuldb.com/submit/786322
https://vuldb.com/vuln/355489
https://vuldb.com/vuln/355489/cti

Get alerted when CVE-2026-5666 or the next vulnerability affects your stack