CVE-2026-8130: SourceCodester SUP Online Shopping message.php sql injection

Published May 8, 2026

Updated

A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Affected Software

1 affected component

Sourcecodester SUP Online Shopping=1.0

Event History

May 8, 2026

CVE Published

via MITRE·02:45 AM

Data Sourced

via MITRE·02:45 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 AM

DescriptionSeverityWeakness

Nov 17, 58336

Event

via FIRST·04:52 PM

Frequently Asked Questions

What is the severity of CVE-2026-8130?

CVE-2026-8130 is classified as a high-severity SQL injection vulnerability.

How do I fix CVE-2026-8130?

To fix CVE-2026-8130, sanitize and validate input parameters in the message.php file to prevent SQL injection.

Which version of SourceCodester SUP Online Shopping is affected by CVE-2026-8130?

CVE-2026-8130 affects SourceCodester SUP Online Shopping version 1.0.

What kind of attack can be executed through CVE-2026-8130?

CVE-2026-8130 can lead to unauthorized database access through SQL injection attacks.

Where in the SourceCodester SUP Online Shopping application is CVE-2026-8130 located?

CVE-2026-8130 is found in the /admin/message.php file of the SourceCodester SUP Online Shopping application.