PT-2026-58113 · Sourcecodester · Simple/Nice Shopping Cart Script

Huajuan · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-15703

Mitre

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Exploit

Correção

Special Elements Injection

SQL injection

Enumeração de Fraquezas

CWE-74

CWE-89

Identificadores relacionados

CVE-2026-15703

Produtos afetados

Simple/Nice Shopping Cart Script

Referências · 7

• 🔥 https://github.com/Wut-sys/cve/issues/1 · Exploit
• https://vuldb.com/submit/856152 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15703 · Nota de Segurança
• https://vuldb.com/cve/CVE-2026-15703 · Nota
• https://sourcecodester.com · Nota
• https://vuldb.com/vuln/378250/cti · Nota
• https://vuldb.com/vuln/378250 · Nota