CVE-2026-5847 — Sensitive Information Exposure in Movie Ticketing System

CWE-200 — Sensitive Information ExposureCWE-284 — Improper Access Control3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.0%
top 89.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Code-projects Movie Ticketing System
Timeline
PublishedApr 9

Description

A vulnerability has been found in code-projects Movie Ticketing System 1.0. Impacted is an unknown function of the file /db/moviedb.sql of the component SQL Database Backup File Handler. Such manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-w2mf-pmr4-jj6w: A vulnerability has been found in code-projects Movie Ticketing System 1↗2026-04-09
▶
CVEList
code-projects Movie Ticketing System SQL Database Backup File moviedb.sql information disclosure↗2026-04-09
▶
CVE-2026-5847 — Sensitive Information Exposure | cvebase