A vulnerability has been found in SourceCodester Online Book Store 1.0 and classified as critical. This issue affects some unknown processing of the file /publisher_list.php. This manipulation of the argument pubid causes sql injection.

The identification of this vulnerability is CVE-2025-9700. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.