PT-2026-30665 · Code Projects · Online Fir System

Ahmadmarzouk · CVE-2026-5666 · Published 2026-04-06 · Updated 2026-04-06

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions code-projects Online FIR System version 1.0

Description A vulnerability exists in code-projects Online FIR System 1.0 related to insecure storage of sensitive information. The issue is associated with an unknown functionality within the /complaints.sql file of the SQL Database Backup File Handler component. This manipulation can be performed remotely and the exploit is publicly available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insecure Storage of Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-922

CWE-200

Related Identifiers

CVE-2026-5666

Affected Products

Online Fir System

References · 8

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20FIR%20System%20PHP%20Exposed%20Database%20Backup.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5666 · Security Note
• https://twitter.com/infoflowcloud/status/2041226041687957839 · Twitter Post
• https://code-projects.org · Note
• https://vuldb.com/vuln/355489 · Note
• https://twitter.com/CVEnew/status/2041224015365148700 · Twitter Post
• https://vuldb.com/vuln/355489/cti · Note
• https://vuldb.com/submit/786322 · Note