PT-2026-31636 · Code Projects · Patient Record Management System

Ahmadmarzook · Published 2026-04-09 · Updated 2026-04-09 · CVE-2026-5960

NVD

CVSS v2.0

5.0

Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Improper Access Control

Information Disclosure

Weakness Enumeration

CWE-284

CWE-200

Related Identifiers

CVE-2026-5960

Affected Products

Patient Record Management System

References · 6

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Patient%20Record%20Management%20System%20PHP%20Exposed%20Database%20Backup.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5960 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/356513 · Note
• https://vuldb.com/submit/788397 · Note
• https://vuldb.com/vuln/356513/cti · Note