CVE-2026-116515: itsourcecode Online Book Store book.php sql injection
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attack can be performed remotely against /book.php by manipulating the bookisbn argument. The provided severity vector indicates that low-level privileges are required, while no user interaction is required.
How likely is exploitation?
A public exploit has been disclosed and may be used. The provided assessment rates exploit maturity as proof-of-concept.
What is the potential impact if exploitation succeeds?
The provided CVSS vector indicates low impact to confidentiality, integrity, and availability. This is consistent with SQL injection allowing limited unauthorized database-related actions.