PT-2026-38652 · Sourcecodester · Sup Online Shopping

N0Name · Published 2026-05-08 · Updated 2026-05-10 · CVE-2026-8129

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester SUP Online Shopping version 1.0

Description A remote SQL injection exists in the wishlist.php file. This issue occurs when the delwlistid argument is manipulated, allowing an attacker to execute unauthorized database queries.

Recommendations Restrict access to the wishlist.php file or avoid using the delwlistid parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-8129

Affected Products

Sup Online Shopping

References · 7

• 🔥 https://github.com/redshadowword-cell/CVE/issues/10 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8129 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/submit/808773 · Note
• https://vuldb.com/vuln/361919/cti · Note
• https://vuldb.com/vuln/361919 · Note
• https://twitter.com/CVEnew/status/2053559138169336185 · Twitter Post