CVE-2026-15540

Name of the Vulnerable Software and Affected Versions SourceCodester Online Book Store System version 1.0

Description An issue exists in the Administrative Interface component within the /admin/index.php file. Improper control of the page argument allows for a file inclusion attack, where an attacker can manipulate the include/require statement in the PHP program. This flaw can be exploited remotely.

Recommendations Avoid using the page argument in the /admin/index.php endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.