CVE-2026-96601: Abdurrab5 online-makeup-store Admin Login index.php sql injection
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of Abdurrab5 online-makeup-store that expose the Admin Login Handler in index.php are potentially exposed. The issue is remotely exploitable and does not require prior privileges or user interaction.
What does an attacker need to exploit it?
An attacker needs network access to the affected application and the ability to submit crafted id or password values to the Admin Login Handler. Public exploit information is available, which may increase the likelihood of attempted exploitation.
Are affected or fixed versions known?
No version information is available. The product uses a rolling release model, and the disclosure does not identify affected or updated releases.