CVE-2025-63891

Published: Nov 14, 2025Modified: Jul 5, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql.

Affected (1)

Products: Oretnom23: Simple Online Book Store System

1 product

Simple Online Book Store System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oretnom23 Simple Online Book Store System	Version 1.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://github.com/lucascdsm/CVEs/blob/main/CVE-2025-63891.md

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.