Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_book_store_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnline Book Store System (abca91f9-4e01-56c2-a8c9-5904970424e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15540 vulnerable 2026-07-29 00:26:18.273635 SourceCodester Online Book Store System Administrative index.php php file inclusion
MEDIUM (4.3)
A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrative Interface. Performing a manipulation of the argument page results in improper control of filename for include/require statement in php program. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-07-13T06:30:08.672Z
Updated: 2026-07-13T18:39:28.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15539 vulnerable 2026-07-29 00:26:18.273377 SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload
MEDIUM (4.7)
A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2026-07-13T06:15:07.726Z
Updated: 2026-07-13T14:48:07.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15537 vulnerable 2026-07-29 00:26:18.269266 SourceCodester Online Book Store System login.php sql injection
HIGH (7.3)
A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-07-13T05:45:09.011Z
Updated: 2026-07-13T18:11:53.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15532 vulnerable 2026-07-29 00:26:18.264766 SourceCodester Online Book Store System User Management cross site scripting
LOW (2.4)
A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2026-07-13T04:30:08.174Z
Updated: 2026-07-13T15:51:56.052Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.