PT-2026-58113 · Sourcecodester · Simple/Nice Shopping Cart Script

Huajuan · Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-15703

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-15703

Affected Products

Simple/Nice Shopping Cart Script

References · 7

• 🔥 https://github.com/Wut-sys/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15703 · Security Note
• https://vuldb.com/submit/856152 · Note
• https://vuldb.com/cve/CVE-2026-15703 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/378250/cti · Note
• https://vuldb.com/vuln/378250 · Note