Skip to main content

Vehicle Management System EUVDEUVD-2026-71099

| CVE-2026-85517 MEDIUM
Information Exposure (CWE-200)
2026-09-04 VulDB GHSA-xh89-3xv9-5fmp
Information Disclosure Vehicle Management System Code Projects
5.5
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
5.5 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Network-accessible, no auth required (PR:N), no complexity; full database dump exposed warrants C:H over vendor VC:L rating.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
CVSS changed
Sep 04, 2026 - 14:22 NVD
6.9 (MEDIUM) 5.5 (MEDIUM)
Analysis Generated
Sep 04, 2026 - 14:20 vuln.today
CVE Published
Sep 04, 2026 - 13:30 cve.org
MEDIUM 6.9

DescriptionCVE.org

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used.

AnalysisAI

Sensitive database exposure in code-projects Vehicle Management System 1.0 allows unauthenticated remote attackers to download the raw SQL database backup file at /vehicle_management.sql directly over HTTP, leaking the full application database contents. The backup file is stored in or under the web root with no access controls, making it trivially accessible to any internet-connected attacker. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No special conditions required beyond a live deployment of the application accessible over the network. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.9 with VC:L understates the practical impact; a full SQL dump exposes all table structures, stored credentials (potentially in cleartext or weakly hashed), vehicle owner PII, and any other application data, which arguably warrants VC:H in most deployment contexts. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Vehicle Management System

View all
CVE-2024-6218 MEDIUM POC
6.9 Jun 21

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Rated m
CVE-2024-5775 MEDIUM POC
6.9 Jun 09

A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Rated medium sever
CVE-2024-5377 MEDIUM POC
6.9 May 26

A vulnerability was found in SourceCodester Vehicle Management System 1.0. Rated medium severity (CVSS 6.9), this vulner
CVE-2026-11344 MEDIUM POC
5.5 Jun 05

Unrestricted file upload in code-projects Vehicle Management System 1.0 allows remote unauthenticated attackers to uploa
CVE-2024-48246 MEDIUM POC
5.4 Mar 05

Vehicle Management System 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the "Name" parameter of /veh
CVE-2024-12785 MEDIUM POC
5.3 Dec 19

A vulnerability was found in itsourcecode Vehicle Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerab
CVE-2024-12784 MEDIUM POC
5.3 Dec 19

A vulnerability was found in itsourcecode Vehicle Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerab
CVE-2024-12783 MEDIUM POC
5.3 Dec 19

A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic.php. Rated medium

CVE-2024-7794 MEDIUM POC
5.3 Aug 14

A vulnerability was found in itsourcecode Vehicle Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerab
CVE-2024-5145 MEDIUM POC
5.3 May 20

A vulnerability was found in SourceCodester Vehicle Management System up to 1.0 and classified as critical.php of the co
CVE-2025-2377 MEDIUM POC
5.1 Mar 17

A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as problematic. Rated medium se
CVE-2024-48245 HIGH
7.2 Jan 07

Vehicle Management System 1.0 is vulnerable to SQL Injection. Rated high severity (CVSS 7.2), this vulnerability is remo

Same weakness CWE-200 – Information Exposure

View all
CVE-2024-24919 HIGH POC
8.6
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2020-3259 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-71099 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy