CVE-2026-15537

Publié : 13 juillet 2026

Modifié : 13 juillet 2026

Score CVSS

7.3

HIGH

Description détaillée

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://medium.com/@gauravkumar67482/sql-injection-leading-to-authentication-bypass-43b773da1967 https://vuldb.com/cve/CVE-2026-15537 https://vuldb.com/submit/855010 https://vuldb.com/vuln/377887 https://vuldb.com/vuln/377887/cti https://www.sourcecodester.com/

Dernières Vulnérabilités

CVE-2026-57830

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

VOIR DÉTAILS

CVE-2026-57829

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

VOIR DÉTAILS

CVE-2026-4769

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

VOIR DÉTAILS