CVE-2025-63891

The SourceCodester Simple Online Book Store System is vulnerable to an information disclosure vulnerability due to a web-accessible backup file. A remote, unauthenticated attacker can perform an HTTP GET request to the /obs/database/obs_db.sql endpoint to retrieve the full database contents , whi...