VULNERABILITY INTELLIGENCE

CVE-2025-63891

CVSS score7.5 HIGH

EPSS probability0.48%

CISA KEVNot currently listed

Published2025-11-14

Last modified2026-07-05

Description

Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents (including schema and credential hashes) via an unauthenticated HTTP GET request to /obs/database/obs_db.sql.