{"id":"CVE-2026-82624","state":"PUBLISHED","title":"code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure","description":"A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been published and may be used.","publishedAt":"2026-08-31T06:30:09.424Z","updatedAt":"2026-08-31T15:44:39.287Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["code-projects Simple Inventory System"],"affected":[{"vendor":"code-projects","product":"Simple Inventory System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:simple_inventory_system:*:*:*:*:*:*:*:*"],"modules":["Database Backup File Handler"]}],"references":["https://vuldb.com/vuln/397124","https://vuldb.com/vuln/397124/cti","https://vuldb.com/cve/CVE-2026-82624","https://vuldb.com/submit/893401","https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Simple%20Inventory%20System%20PHP%20Exposed%20Database%20Backup.md","https://code-projects.org/"],"weaknesses":["CWE-200","CWE-284"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82624.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82624","state":"PUBLISHED","datePublished":"2026-08-31T06:30:09.424Z","dateUpdated":"2026-08-31T15:44:39.287Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-30T08:12:13.070Z"},"containers":{"cna":{"title":"code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure","descriptions":[{"lang":"en","value":"A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been published and may be used."}],"affected":[{"vendor":"code-projects","product":"Simple Inventory System","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:code-projects:simple_inventory_system:*:*:*:*:*:*:*:*"],"modules":["Database Backup File Handler"]}],"references":[{"url":"https://vuldb.com/vuln/397124","name":"VDB-397124 | code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/397124/cti","name":"VDB-397124 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-82624","name":"CVE-2026-82624 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/893401","name":"Submit #893401 | code-projects Simple Inventory System In PHP With Source Code 1.0 Information Disclosure","tags":["third-party-advisory"]},{"url":"https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Simple%20Inventory%20System%20PHP%20Exposed%20Database%20Backup.md","tags":["exploit"]},{"url":"https://code-projects.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"Information Disclosure"}]},{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"Improper Access Controls"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-31T06:30:09.424Z"},"timeline":[{"time":"2026-08-30T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-30T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-30T10:17:21.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"AhmadMarzook (VulDB User)","type":"reporter"}],"tags":["x_freeware"],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-31T15:39:08.128983Z","id":"CVE-2026-82624","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-31T15:44:39.287Z"}}]}}}