PT-2026-4823 · Unknown · Ijason-Liu Books Manager

Y1Fan · CVE-2026-1445 · Published 2026-01-26 · Updated 2026-01-26

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iJason-Liu Books Manager versions prior to 298ba736387ca37810466349af13a0fdf828e99c

Description A flaw exists in iJason-Liu Books Manager that allows for unrestricted file uploads. This issue is related to the manipulation of the book cover argument within the file controllers/books center/upload bookCover.php. The attack can be initiated remotely. The exploit has been publicly released.

Recommendations Versions prior to 298ba736387ca37810466349af13a0fdf828e99c should be updated. As a temporary workaround, restrict access to the file controllers/books center/upload bookCover.php until a patch is available. Avoid uploading files through the book cover parameter until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-1445

Affected Products

Ijason-Liu Books Manager

References · 6

• 🔥 https://blog.y1fan.work/2026/01/13/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0getshell · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-1445 · Security Note
• https://vuldb.com/?submit.736971 · Note
• https://vuldb.com/?id.342874 · Note
• https://twitter.com/CVEnew/status/2015912839467217053 · Twitter Post
• https://vuldb.com/?ctiid.342874 · Note