CVE-2026-15537: SourceCodester Online Book Store System login.php sql injection
Published Jul 13, 2026
·Updated
A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
1 affected component
SourceCodester Online Book Store System=1.0
Event History
Jul 13, 2026
CVE Published
via MITRE·05:45 AM
Data Sourced
via MITRE·05:45 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-15537?
The severity of CVE-2026-15537 is high, rated at 7.3.
2
How do I fix CVE-2026-15537?
To fix CVE-2026-15537, ensure proper input validation and use parameterized queries to prevent SQL injection.
3
What type of vulnerability is CVE-2026-15537?
CVE-2026-15537 is classified as an SQL Injection vulnerability.
4
Can CVE-2026-15537 be exploited remotely?
Yes, CVE-2026-15537 can be exploited remotely.
5
Which software is affected by CVE-2026-15537?
CVE-2026-15537 affects SourceCodester Online Book Store System version 1.0.