Is there a public PoC exploit available for CVE-2026-6000?

Yes, a public proof-of-concept exploit is available for CVE-2026-6000. Prioritise patching immediately. EPSS: 0.0%.

Online Library Management System CVE-2026-6000

Q: What is the CVSS score of CVE-2026-6000?

CVE-2026-6000 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21282 LOW

Information Exposure (CWE-200)

2026-04-10 VulDB

Information Disclosure Online Library Management System

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

PoC Detected

Apr 10, 2026 - 03:16 vuln.today

Public exploit code

EUVD ID Assigned

Apr 10, 2026 - 02:45 euvd

EUVD-2026-21282

Analysis Generated

Apr 10, 2026 - 02:45 vuln.today

CVE Published

Apr 10, 2026 - 02:00 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unknown function of the file /sql/library.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used.

AnalysisAI

Information disclosure in code-projects Online Library Management System 1.0 allows unauthenticated remote attackers to access sensitive data from SQL database backup files via the /sql/library.sql component, requiring user interaction (clicking a link or similar action). The vulnerability has a publicly available exploit and carries a CVSS score of 4.3 with an exploit proof-of-concept (E:P) rating, making it a low-to-moderate priority issue with confirmed public discoverability but limited real-world attack surface due to interaction requirements.

Technical ContextAI

The vulnerability exists in the SQL Database Backup File Handler component of the Online Library Management System, specifically within the /sql/library.sql file. The root cause is CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), indicating that backup or configuration files containing database credentials, user data, or other sensitive information are either directly accessible or improperly protected from public access. This is a common misconfiguration in PHP-based web applications where database backup files are stored in web-accessible directories without proper access controls or file extension restrictions. The affected product is code-projects Online Library Management System version 1.0 (CPE: cpe:2.3:a:code-projects:online_library_management_system:*:*:*:*:*:*:*:*).

RemediationAI

Immediately remove or restrict access to the /sql/ directory and all backup files (.sql, .db, .bak, etc.) from web-accessible locations, preferably by moving them outside the web root or implementing strict .htaccess (Apache) or web.config (IIS) rules to deny public access. Upgrade to a patched version if available from code-projects.org; however, no specific fix version is provided in the available data, so contact the vendor directly for patch status. As an interim measure, disable directory listing and implement authentication controls on the /sql/ directory. Review database backup procedures to ensure sensitive data is encrypted or access-controlled. Detailed vulnerability information and proof-of-concept analysis are available at https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Sensitive%20Information%20Disclosure%20in%20Online%20Library%20Management%20System%20PHP%20Exposed%20Database%20Backup.md.