SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-15537

HIGH · CVSS 7.3 EPSS 0.26% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

A SQL injection vulnerability in the admin/login.php file of SourceCodester Online Book Store System 1.0 allows remote attackers to manipulate the Username parameter, potentially compromising the database. This high-severity flaw could lead to unauthorized access to sensitive data, making it critical for organizations using this system to prioritize immediate patching or mitigation efforts. Users of this software should assess their exposure and implement security measures to prevent exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-15537
Severity
HIGH
CVSS
7.3
EPSS
0.26%

Original NVD Description

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.