PT-2026-57644 · Sourcecodester · Online Book Store System

Publicado 2026-07-13 · Atualizado 2026-07-13 · CVE-2026-15539

Mitre

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Exploit

Correção

RCE

Improper Access Control

Unrestricted File Upload

Enumeração de Fraquezas

CWE-284

CWE-434

Identificadores relacionados

CVE-2026-15539

Produtos afetados

Online Book Store System

Referências · 9

• 🔥 https://medium.com/@hemantrajbhati5555/critical-authenticated-remote-code-execution-rce-via-unrestricted-file-upload-5a4a313ea1f1 · Exploit
• https://twitter.com/CVEnew/status/2076612845991772563 · Publicação no Twitter
• https://vuldb.com/vuln/377889/cti · Nota
• https://sourcecodester.com · Nota
• https://vuldb.com/vuln/377889 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15539 · Nota de Segurança
• https://twitter.com/f1tym1/status/2076628826898014443 · Publicação no Twitter
• https://vuldb.com/cve/CVE-2026-15539 · Nota
• https://vuldb.com/submit/855046 · Nota