PT-2026-57642 · Sourcecodester · Online Book Store System

Gaurav Kumar · Publicado 2026-07-13 · Atualizado 2026-07-13 · CVE-2026-15537

Mitre

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-15537

Produtos afetados

Online Book Store System

Referências · 10

• 🔥 https://medium.com/@gauravkumar67482/sql-injection-leading-to-authentication-bypass-43b773da1967 · Exploit
• https://vuldb.com/vuln/377887 · Nota
• https://twitter.com/CVEnew/status/2076612866837565624 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-15537 · Nota de Segurança
• https://twitter.com/DFIR_Lab/status/2076568694050681212 · Publicação no Twitter
• https://vuldb.com/vuln/377887/cti · Nota
• https://vuldb.com/cve/CVE-2026-15537 · Nota
• https://twitter.com/infoflowcloud/status/2076614226504736914 · Publicação no Twitter
• https://vuldb.com/submit/855010 · Nota
• https://sourcecodester.com · Nota