{"id":"CVE-2026-76799","state":"PUBLISHED","title":"code-projects Login Registration System SQL Database Backup login_registration_system.sql file access","description":"A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/login_registration_system.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.","publishedAt":"2026-08-20T01:15:10.958Z","updatedAt":"2026-08-21T16:45:46.718Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["code-projects Login Registration System"],"affected":[{"vendor":"code-projects","product":"Login Registration System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:login_registration_system:*:*:*:*:*:*:*:*"],"modules":["SQL Database Backup Handler"]}],"references":["https://vuldb.com/vuln/393314","https://vuldb.com/vuln/393314/cti","https://vuldb.com/cve/CVE-2026-76799","https://vuldb.com/submit/880056","https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Login-Registration-System-login_registration_system.sql-Sensitive-Database-Disclosure.md","https://code-projects.org/"],"weaknesses":["CWE-552","CWE-425"],"ingestedAt":"2026-10-29T20:12:58.252Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/76xxx/CVE-2026-76799.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-76799","state":"PUBLISHED","datePublished":"2026-08-20T01:15:10.958Z","dateUpdated":"2026-08-21T16:45:46.718Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-19T19:21:51.211Z"},"containers":{"cna":{"title":"code-projects Login Registration System SQL Database Backup login_registration_system.sql file access","descriptions":[{"lang":"en","value":"A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/login_registration_system.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks."}],"affected":[{"vendor":"code-projects","product":"Login Registration System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:login_registration_system:*:*:*:*:*:*:*:*"],"modules":["SQL Database Backup Handler"]}],"references":[{"url":"https://vuldb.com/vuln/393314","name":"VDB-393314 | code-projects Login Registration System SQL Database Backup login_registration_system.sql file access","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/393314/cti","name":"VDB-393314 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-76799","name":"CVE-2026-76799 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/880056","name":"Submit #880056 | code-projects.org Login Registration System In PHP 1.0 Information Disclosure","tags":["third-party-advisory"]},{"url":"https://raw.githubusercontent.com/anubhavv106/Security-Advisories/refs/heads/main/Login-Registration-System-login_registration_system.sql-Sensitive-Database-Disclosure.md","tags":["exploit"]},{"url":"https://code-projects.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-552","type":"CWE","lang":"en","description":"Files or Directories Accessible"}]},{"descriptions":[{"cweId":"CWE-425","type":"CWE","lang":"en","description":"Direct Request"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-20T01:15:10.958Z"},"timeline":[{"time":"2026-08-19T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-19T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-19T21:26:56.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"anubhav106 (VulDB User)","type":"reporter"}],"tags":["x_freeware"],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-21T16:45:31.633292Z","id":"CVE-2026-76799","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-21T16:45:46.718Z"}}]}}}