Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3034▼ 62 respecto a la semana anterior
Críticas / altas1427▲ 61 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 0.45% | — | Oretnom23 Simple Online Book Store System | 14/11/2025 | 5/7/2026 | Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql. | |
| Modificada | Media (5.3) | 0.54% | — | Oretnom23 Simple Online Book Store System | 21/7/2024 | 17/6/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admin_delete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed… | |
| Modificada | Media (5.4) | 0.49% | — | Oretnom23 Simple Online Book Store System | 12/9/2022 | 17/6/2026 | In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS). | |
| Modificada | Crítica (9.8) | 0.55% | — | Simple Online Book Store System Project Simple Online Book Store System | 11/8/2022 | 17/6/2026 | A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability is an unknown functionality of the file /obs/bookPerPub.php. The manipulation of the argument bookisbn leads to sql injection. The attack can be launched remotely. The associated… | |
| Modificada | Crítica (9.8) | 0.63% | — | Simple Online Book Store System Project Simple Online Book Store System | 11/8/2022 | 17/6/2026 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is the identifier… | |
| Modificada | Media (6.1) | 0.46% | — | Simple Online Book Store System Project Simple Online Book Store System | 11/8/2022 | 17/6/2026 | A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this… | |
| Modificada | Crítica (9.8) | 0.63% | — | Simple Online Book Store System Project Simple Online Book Store System | 11/8/2022 | 17/6/2026 | A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument book_isbn leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is… | |
| Modificada | Crítica (9.8) | 0.56% | — | Simple Online Book Store System Project Simple Online Book Store System | 11/8/2022 | 17/6/2026 | A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin_ add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigned to this… |