CVE-2022-37796

CVE-2022-37796 affects Simple Online Book Store System v1.0. The issue is a Cross-Site Scripting (XSS) vulnerability in /admin_book.php affecting the Title, Author, and Description parameters. Root cause details are not explicitly provided beyond the XSS description; no product/vendor-specific pa...

CVE-2024-6951

The CVE-2024-6951 entry corresponds to a SQL injection in SourceCodester Simple Online Book Store System 1.0,具体 affecting the admin_delete.php logic where the bookisbn parameter is manipulated. Exploitation can be performed remotely and has been disclosed publicly, with multiple sources assigning...

CVE-2025-63891

The SourceCodester Simple Online Book Store System is vulnerable to an information disclosure vulnerability due to a web-accessible backup file. A remote, unauthenticated attacker can perform an HTTP GET request to the /obs/database/obs_db.sql endpoint to retrieve the full database contents , whi...