https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63891.htmlhttps://patchthecve.com/cve/CVE-2025-63891.htmlSun, 05 Jul 2026 17:17:22 +0000HIGH 7.5: Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql.https://patchthecve.com/cve/CVE-2024-6951.htmlhttps://patchthecve.com/cve/CVE-2024-6951.htmlWed, 17 Jun 2026 08:19:03 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file admin_delete.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2022-37796.htmlhttps://patchthecve.com/cve/CVE-2022-37796.htmlWed, 17 Jun 2026 04:55:15 +0000MEDIUM 5.4: In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS).https://patchthecve.com/cve/CVE-2022-2771.htmlhttps://patchthecve.com/cve/CVE-2022-2771.htmlWed, 17 Jun 2026 04:42:33 +0000MEDIUM 6.3: A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability is an unknown functionality of the file /obs/bookPerPub.php. The manipulation of the argument bookisbn leads to sql injection. The attack can be launched remotehttps://patchthecve.com/cve/CVE-2022-2770.htmlhttps://patchthecve.com/cve/CVE-2022-2770.htmlWed, 17 Jun 2026 04:42:33 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is thehttps://patchthecve.com/cve/CVE-2022-2748.htmlhttps://patchthecve.com/cve/CVE-2022-2748.htmlWed, 17 Jun 2026 04:42:30 +0000LOW 3.5: A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identhttps://patchthecve.com/cve/CVE-2022-2747.htmlhttps://patchthecve.com/cve/CVE-2022-2747.htmlWed, 17 Jun 2026 04:42:30 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument book_isbn leads to sql injection. The attack may be initiated remotely. The associated identifier of thishttps://patchthecve.com/cve/CVE-2022-2746.htmlhttps://patchthecve.com/cve/CVE-2022-2746.htmlWed, 17 Jun 2026 04:42:30 +0000MEDIUM 6.3: A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin_ add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigned