CVE-2026-5847: code-projects movie ticketing system
Vulnerability summary
CVE-2026-5847 is a medium (CVSS 5.3) vulnerability in code-projects movie ticketing system. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 09-04-2026PublishedVulnerability first disclosed.
- 09-04-2026Last modifiedVulnerability information updated.
Description
A vulnerability has been found in code-projects Movie Ticketing System 1.0. Impacted is an unknown function of the file /db/moviedb.sql of the component SQL Database Backup File Handler. Such manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS metrics
7 scores · 2 sources · 4 versions- NVDNIST2.1LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XDiffers
- NVDNIST4.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- NVDNIST5.0MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
+0.19 pp
From 0.26% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundCvesmarz
Maturity: poc
Weaknesses
CWE · root cause- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Affected systems
Code-projects1 product
1 vendor · 1 product
References
5 links- vuldb.com/vuln/356373VDB Entry
- vuldb.com/submit/790337Third Party Advisory
- github.com/ahmadmarz10-hub/…Exploit
- code-projects.orgProduct