CVE-2026-15540 — Vulnerability intelligence
—
Published:
- CVSS
- 2.1
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrative Interface. Performing a manipulation of the argument page results in improper control of filename for include/require statement in php program. It is possible to initiate the attack remotely. The exploit is now public and may be used.