PT-2026-4823 · Unknown · Ijason-Liu Books Manager

Y1Fan · Publicado 2026-01-26 · Atualizado 2026-01-26 · CVE-2026-1445

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iJason-Liu Books Manager versions prior to 298ba736387ca37810466349af13a0fdf828e99c

Description A flaw exists in iJason-Liu Books Manager that allows for unrestricted file uploads. This issue is related to the manipulation of the book cover argument within the file controllers/books center/upload bookCover.php. The attack can be initiated remotely. The exploit has been publicly released.

Recommendations Versions prior to 298ba736387ca37810466349af13a0fdf828e99c should be updated. As a temporary workaround, restrict access to the file controllers/books center/upload bookCover.php until a patch is available. Avoid uploading files through the book cover parameter until the issue is resolved.

Exploit

Correção

Unrestricted File Upload

Improper Access Control

Enumeração de Fraquezas

CWE-434

CWE-284

Identificadores relacionados

CVE-2026-1445

Produtos afetados

Ijason-Liu Books Manager

Referências · 6

• 🔥 https://blog.y1fan.work/2026/01/13/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0getshell · Exploit
• https://vuldb.com/?submit.736971 · Nota
• https://vuldb.com/?id.342874 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1445 · Nota de Segurança
• https://twitter.com/CVEnew/status/2015912839467217053 · Publicação no Twitter
• https://vuldb.com/?ctiid.342874 · Nota