Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:simple_and_nice_shopping_cart_script:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductSimple And Nice Shopping Cart Script (c147dc2a-2ea0-56f5-92c0-d448917899eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15703 vulnerable 2026-07-29 00:26:18.395702 SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection
HIGH (7.3)
A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-07-14T17:00:08.729Z
Updated: 2026-07-15T15:45:27.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15190 vulnerable 2026-07-29 00:26:17.881626 SourceCodester Simple and Nice Shopping Cart Script login.php sql injection
HIGH (7.3)
A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Published: 2026-07-09T15:45:09.130Z
Updated: 2026-07-09T17:14:09.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14654 vulnerable 2026-07-29 00:26:17.441662 SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection
HIGH (7.3)
A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument user_id leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2026-07-04T21:00:09.344Z
Updated: 2026-07-06T17:29:58.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14653 vulnerable 2026-07-29 00:26:17.441242 SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.php sql injection
HIGH (7.3)
A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument user_id causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Published: 2026-07-04T20:45:09.569Z
Updated: 2026-07-06T18:41:47.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14652 vulnerable 2026-07-29 00:26:17.441032 SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Published: 2026-07-04T20:30:09.887Z
Updated: 2026-07-06T13:51:02.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3148 vulnerable 2026-06-08 08:01:17.937338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1497 vulnerable 2026-06-08 05:52:36.008941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2957 vulnerable 2026-06-08 05:43:36.791465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2909 vulnerable 2026-06-08 05:43:36.701750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2814 vulnerable 2026-06-08 05:43:36.543943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.