https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-2771.htmlhttps://patchthecve.com/cve/CVE-2022-2771.htmlWed, 17 Jun 2026 04:42:33 +0000MEDIUM 6.3: A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability is an unknown functionality of the file /obs/bookPerPub.php. The manipulation of the argument bookisbn leads to sql injection. The attack can be launched remotehttps://patchthecve.com/cve/CVE-2022-2770.htmlhttps://patchthecve.com/cve/CVE-2022-2770.htmlWed, 17 Jun 2026 04:42:33 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to launch the attack remotely. VDB-206166 is thehttps://patchthecve.com/cve/CVE-2022-2748.htmlhttps://patchthecve.com/cve/CVE-2022-2748.htmlWed, 17 Jun 2026 04:42:30 +0000LOW 3.5: A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identhttps://patchthecve.com/cve/CVE-2022-2747.htmlhttps://patchthecve.com/cve/CVE-2022-2747.htmlWed, 17 Jun 2026 04:42:30 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument book_isbn leads to sql injection. The attack may be initiated remotely. The associated identifier of thishttps://patchthecve.com/cve/CVE-2022-2746.htmlhttps://patchthecve.com/cve/CVE-2022-2746.htmlWed, 17 Jun 2026 04:42:30 +0000MEDIUM 6.3: A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin_ add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigned