CVE-2026-123028 in Online Book Store

Prediction

by VulDB Data Team • 11/05/2026

A vulnerability was identified in <a href="/product/itsourcecode:online_book_store">itsourcecode Online Book Store 1.0</a>. Affected by this issue is some unknown functionality of the file <em>/admin_edit.php</em>. The manipulation of the argument <em>bookisbn</em> leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-431400
• CPE: VulDB
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-123028
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-123028
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-123028/