SourceCodester Online Book Store System vulnerabilities
4 known CVE vulnerabilities in SourceCodester Online Book Store System, translated and rated.
- CVE-2026-15540Medium
A vulnerability was found in SourceCodester Online Book Store System 1.0, involving uncontrolled file inclusion (Local File Inclusion) in /admin/index.php. By manipulating the 'page' argument, an attacker can remotely include arbitrary PHP files, leading to unauthorized data access or code execution.
- CVE-2026-15539Medium
A vulnerability in SourceCodester Online Book Store System 1.0 allows unrestricted file upload via the book image upload feature in /admin/index.php?page=books. This can lead to remote code execution. The exploit is publicly available.
- CVE-2026-15537High
A SQL injection vulnerability has been discovered in SourceCodester Online Book Store System 1.0 in the file admin/login.php. An attacker can remotely manipulate the Username argument, leading to SQL injection. The exploit has been publicly released.
- CVE-2026-15532Low
A cross-site scripting vulnerability was found in SourceCodester Online Book Store System 1.0 in the User Management Module. Manipulation of the Name or Username arguments allows remote script execution. The exploit is publicly available.