Advisories · Technology

SourceCodester Online Book Store System.

Every CVE that names SourceCodester Online Book Store System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19904 CVE record

CVSS 4.8 Medium

SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting
- SourceCodester Online Book Store System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 15 Aug 2026
CVE-2026-15540 CVE record

CVSS 5.3 Medium

SourceCodester Online Book Store System Administrative index.php php file inclusion
- SourceCodester Online Book Store System
- Path traversal
- File inclusion
Not analysed yet 13 Jul 2026
CVE-2026-15539 CVE record

CVSS 5.1 Medium

SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload
- SourceCodester Online Book Store System
- Broken access control
- Unrestricted file upload
Not analysed yet 13 Jul 2026
CVE-2026-15537 CVE record

CVSS 6.9 Medium

SourceCodester Online Book Store System login.php sql injection
- SourceCodester Online Book Store System
- Other injection
- SQL injection
Not analysed yet 13 Jul 2026
CVE-2026-15532 CVE record

CVSS 4.8 Medium

SourceCodester Online Book Store System User Management cross site scripting
- SourceCodester Online Book Store System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 13 Jul 2026