CVE-2026-14652: fallo de gravedad media en SourceCodester Simple and Nice Shopping Cart…
SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection
Publicada el · Actualizada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 6.9epss 0.4%
probabilidad de explotación
0.4%top 64% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
SourceCodester · Simple and Nice Shopping Cart ScriptPoCs públicas encontradas — 1
cve_referencegithub.com/Yuesswor/cve/issues/2no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — SourceCodester Simple and Nice Shopping Cart…
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-2957MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php sql injectionEPSS 0.8%CVE-2022-2909MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted uploadEPSS 0.8%CVE-2023-1497MEDIUMSourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted uploadEPSS 0.7%CVE-2022-2814LOWSourceCodester Simple and Nice Shopping Cart Script login.php cross site scriptingEPSS 0.6%CVE-2026-3148MEDIUMSourceCodester Simple and Nice Shopping Cart Script signup.php sql injectionEPSS 0.6%CVE-2026-15703MEDIUMSourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injectionEPSS 0.4%