CVE-2026-6000 MEDIUM

CVE-2026-6000: code-projects Online Library Management System SQL Database Backup File library.sql information disclosure

Vendor Code-Projects
Product Online Library Management System
Weakness CWE-200 · Info exposure
Published April 10, 2026
Last update April 10, 2026

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unknown function of the file /sql/library.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used.

Key dates

02Disclosure timeline

April 10, 2026 CVE published
April 10, 2026 Record updated