CVE-2026-5960 - code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure

Back Back to CVE browser

MEDIUM

code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure

Published Apr 9, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.45%

Description

A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Vendor Code-Projects Product Patient Record Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Code-Projects

Patient Record Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-284

References (5)

https://code-projects.org/
product
https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Patient%20Record%20Management%20System%20PHP%20Exposed%20Database%20Backup.md
exploit
https://vuldb.com/submit/788397
third-party-advisory
https://vuldb.com/vuln/356513
vdb-entry
https://vuldb.com/vuln/356513/cti
signaturepermissions-required

Link	Providers	Tags
https://code-projects.org/		product
https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Patient%20Record%20Management%20System%20PHP%20Exposed%20Database%20Backup.md		exploit
https://vuldb.com/submit/788397		third-party-advisory
https://vuldb.com/vuln/356513		vdb-entry
https://vuldb.com/vuln/356513/cti		signaturepermissions-required