Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-63891 2 Oretnom23, Sourcecodester 2 Simple Online Book Store System, Simple Online Book Store System 2025-11-19 7.5 High
Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql.
CVE-2022-37796 1 Oretnom23 1 Simple Online Book Store System 2024-11-21 5.4 Medium
In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS).