CVE-2026-14652

HighCVSS 7.3/10Last modified Oct 25, 2026

Description

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 4, 2026
Last modified
Oct 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-146537.3A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admCVE-2026-146547.3A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admiCVE-2026-146552.4A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file CVE-2026-146564.3A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/removCVE-2026-146576.3A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-sCVE-2026-146586.3A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/markiCVE-2026-146596.3A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointmeCVE-2026-14666.1Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited CVE-2026-146607.3A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. PerformCVE-2026-146628.8Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersCVE-2026-146636.5Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertexCVE-2026-146648.8Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the databas
CVE-2026-14652: High severity, CVSS 7.3 | Vulnix