CVE-2026-14654: SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection
A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14654?
The severity of CVE-2026-14654 is medium with a score of 5.5.
What type of vulnerability is CVE-2026-14654?
CVE-2026-14654 is classified as a SQL Injection vulnerability.
How can CVE-2026-14654 be exploited?
CVE-2026-14654 can be exploited remotely by manipulating the user_id argument in the /admin/girlsproductdeletequery.php file.
What are the potential impacts of CVE-2026-14654?
The potential impacts of CVE-2026-14654 include unauthorized access to the database and manipulation of data.
How do I fix CVE-2026-14654?
To fix CVE-2026-14654, you should validate and sanitize input for the user_id parameter to prevent SQL injection.