Description
A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Online Book Store System | 1.0 | — |
References
- VDB-377889 | SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload vdb-entry
- VDB-377889 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-15539 | CVE Analysis and Report third-party-advisory
- Submit #855046 | SourceCodester Online Book Store System 1.0 Remote Code Execution third-party-advisory
- https://medium.com/@hemantrajbhati5555/critical-authenticated-remote-code-execution-rce-via-unrestricted-file-upload-5a4a313ea1f1 broken-link exploit
- https://www.sourcecodester.com/ product