Vulnerability · Published Aug 31, 2026 · Assigned by VulDB
CVE-2026-82624code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure
Medium 5.3
In plain English
A medium-severity information exposure in Simple Inventory System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Official description
A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been published and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Simple Inventory System | 1.0 |
Weakness: CWE-200, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-397124 | code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure vdb-entry
- VDB-397124 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-82624 | CVE Analysis and Report third-party-advisory
- Submit #893401 | code-projects Simple Inventory System In PHP With Source Code 1.0 Information Disclosure third-party-advisory
- https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Simple%20Inventory%20System%20PHP%20Exposed%20Database%20Backup.md exploit
- https://code-projects.org/ product