CVE-2026-14639: CodeAstro Ecommerce Website my_account.php sql injection
A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/myaccount.php?editaccount. Such manipulation of the argument cname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14639?
CVE-2026-14639 has a medium severity rating of 6.3 according to the CVSS scoring system.
How can I fix CVE-2026-14639?
To fix CVE-2026-14639, ensure that user inputs are properly sanitized and use prepared statements to prevent SQL injection.
What type of attack is possible with CVE-2026-14639?
CVE-2026-14639 allows for a remote SQL injection attack through the my_account.php file in the CodeAstro Ecommerce Website.
Which software is affected by CVE-2026-14639?
CVE-2026-14639 affects version 1.0 of the CodeAstro Ecommerce Website.
What is the impact of exploiting CVE-2026-14639?
Exploitation of CVE-2026-14639 may lead to unauthorized access and manipulation of the database due to SQL injection.