CVE-2026-15539: SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload
A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-15539?
CVE-2026-15539 has a medium severity score of 4.7 according to the CVSS.
How do I fix CVE-2026-15539?
To fix CVE-2026-15539, implement validation checks on file uploads to restrict allowed file types and sizes.
What type of vulnerability is CVE-2026-15539?
CVE-2026-15539 is classified as a Malicious File Upload vulnerability.
Can CVE-2026-15539 be exploited remotely?
Yes, CVE-2026-15539 can be exploited remotely due to unrestricted file upload capabilities.
Which component is affected by CVE-2026-15539?
CVE-2026-15539 affects the Book Image Upload Feature in the SourceCodester Online Book Store System.