Skip to content
Threat Feed
Subscribe

Tag

Shopping-Cart

1 brief RSS
high advisory

CVE-2026-14654: Remote SQL Injection in SourceCodester Simple and Nice Shopping Cart Script

A remote, unauthenticated SQL injection vulnerability (CVE-2026-14654) in SourceCodester Simple and Nice Shopping Cart Script 1.0 allows attackers to manipulate the `user_id` argument via `/admin/girlsproductdeletequery.php`, leading to database compromise, data exfiltration, or unauthorized access, with an exploit publicly available.

Simple and Nice Shopping Cart Script 1.0 sql-injection web-vulnerability cve sourcecodester shopping-cart
1r 1t 1c 7i