Simple Online Book Store System

simple_online_book_store_system

Vendor: Oretnom23 • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-63891 1Oretnom23 1Simple Online Book Store System Jul 5, 2026 Nov 14, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes)...Show more Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql.Show less
CVE-2024-6951 1Oretnom23 1Simple Online Book Store System Jun 17, 2026 Jul 21, 2024 5.3 MEDIUM· v4 9.8 CRITICAL· v3 6.5 MEDIUM· v2 A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admin_delete.php. The manipulation of the argument bookisbn lea...Show more A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admin_delete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272073 was assigned to this vulnerability.Show less
CVE-2022-37796 1Oretnom23 1Simple Online Book Store System Jun 17, 2026 Sep 12, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS).