CVE-2026-15539

MEDIUM

SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload

Title source: cna
STIX 2.1

Description

A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

References (6)

Core 6
Core References
Vdb Entry vdb-entry
VDB-377889 | SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload
https://vuldb.com/vuln/377889
Signature, Permissions Required signature permissions-required
VDB-377889 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/377889/cti
Third Party Advisory third-party-advisory
CVE-2026-15539 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-15539
Third Party Advisory third-party-advisory
Submit #855046 | SourceCodester Online Book Store System 1.0 Remote Code Execution
https://vuldb.com/submit/855046

Scores

CVSS v3 4.7
EPSS 0.0023
EPSS Percentile 13.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-284 CWE-434
Status published
Products (1)
SourceCodester/Online Book Store System 1.0
Published Jul 13, 2026
Tracked Since Jul 13, 2026