CVE-2026-6000

MediumCVSS 4.3

Published: 10/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

A vulnerability was found in code-projects Online Library Management System 1.0 affecting /sql/library.sql of the SQL Database Backup File Handler component. Manipulation leads to information disclosure, the attack can be initiated remotely, and the exploit is publicly available.

Risk Assessment

A remote attacker could access a database backup containing sensitive information, breaching data confidentiality.

Recommendation

Protect backup files from network access, move them outside the public directory, and restrict access to the system.

Other vulnerabilities in Online Library Management System

CVE-2025-57119Critical
An issue in Online Library Management System v3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function. This vulnerability can be exploited to gain unauthorized administrative access.

Original NVD description (English source)

A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unknown function of the file /sql/library.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS