CVE-2026-14652: falha de média gravidade em SourceCodester Simple and Nice Shopping Cart…
SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection
Publicada em · Atualizada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.9epss 0.4%
probabilidade de exploração
0.4%top 64% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
SourceCodester · Simple and Nice Shopping Cart ScriptPoCs públicas encontradas — 1
cve_referencegithub.com/Yuesswor/cve/issues/2não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — SourceCodester Simple and Nice Shopping Cart…
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2957MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php sql injectionEPSS 0.8%CVE-2022-2909MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted uploadEPSS 0.8%CVE-2023-1497MEDIUMSourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted uploadEPSS 0.7%CVE-2022-2814LOWSourceCodester Simple and Nice Shopping Cart Script login.php cross site scriptingEPSS 0.6%CVE-2026-3148MEDIUMSourceCodester Simple and Nice Shopping Cart Script signup.php sql injectionEPSS 0.6%CVE-2026-15703MEDIUMSourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injectionEPSS 0.4%