CVE-2026-19903
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A vulnerability has been found in SourceCodester Online Clothing Store 1.0. An unknown part of the file /db/shopping.sql of the component SQL Database Backup is affected. The manipulation leads to files or directories accessible. Remote exploitation is possible. The exploit has been disclosed to the public and may be used.
Risk Assessment
Risk of unauthorized access to files and directories, potentially leading to data leakage or further system attacks.
Recommendation
Apply vendor patches if available, or restrict access to the /db/shopping.sql file. Conduct a security audit and monitor logs for suspicious activity.
Original NVD description (English source)
A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.