Skip to content
Threat Feed
Subscribe

Product

Simple and Nice Shopping Cart Script 1.0

2 briefs RSS
high advisory

CVE-2026-14654: Remote SQL Injection in SourceCodester Simple and Nice Shopping Cart Script

A remote, unauthenticated SQL injection vulnerability (CVE-2026-14654) in SourceCodester Simple and Nice Shopping Cart Script 1.0 allows attackers to manipulate the `user_id` argument via `/admin/girlsproductdeletequery.php`, leading to database compromise, data exfiltration, or unauthorized access, with an exploit publicly available.

Simple and Nice Shopping Cart Script 1.0 sql-injection web-vulnerability cve sourcecodester shopping-cart
1r 1t 1c 7i
high advisory

CVE-2026-14652: SQL Injection in SourceCodester Simple and Nice Shopping Cart Script

A critical SQL injection vulnerability (CVE-2026-14652) exists in the Admin Login component of SourceCodester Simple and Nice Shopping Cart Script version 1.0, allowing an unauthenticated attacker to remotely exploit it by manipulating the 'Username' argument in the /admin/login.php file, potentially leading to unauthorized access, information disclosure, or data manipulation, with a public exploit available.

Simple and Nice Shopping Cart Script 1.0 sql-injection web-vulnerability cve initial-access
1r 1t 1c