PT-2026-21868 · Sourcecodester · Simple/Nice Shopping Cart Script

Xiaosun · Publicado 2026-02-25 · Atualizado 2026-03-02 · CVE-2026-3148

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Simple and Nice Shopping Cart Script version 1.0

Description A SQL injection issue exists in SourceCodester Simple and Nice Shopping Cart Script 1.0. The issue is located in an unknown function within the /signup.php file. Manipulating the Username argument can trigger the SQL injection. The attack can be initiated remotely, and the exploit has been publicly disclosed.

Recommendations Apply any available updates or patches for version 1.0. As a temporary workaround, sanitize the Username input to prevent SQL injection. Restrict access to the /signup.php file if possible.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-3148

Produtos afetados

Simple/Nice Shopping Cart Script

Referências · 13

• 🔥 https://github.com/xiaoxiaojie12/CVE/issues/1 · Exploit
• https://sourcecodester.com · Nota
• https://t.me/cveNotify/153105 · Publicação no Telegram
• https://vuldb.com/?ctiid.347654 · Nota
• https://twitter.com/RedPacketSec/status/2026537186800148804 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2026641346618925508 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2026696530359407041 · Publicação no Twitter
• https://vuldb.com/?id.347654 · Nota
• https://vuldb.com/?submit.758822 · Nota
• https://twitter.com/cracbot/status/2028425221594857811 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-3148 · Aviso do Fabricante
• https://t.me/CVEtracker/45696 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-3148 · Nota de Segurança