CVE-2026-8130
HighSummary
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to SQL injection.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a risk of unauthorized access to the database.
Recommendation
It is recommended to update the software to the latest version and secure the /admin/message.php file against unauthorized access.
Other vulnerabilities in SourceCodester SUP Online Shopping 1.0
See all- CVE-2026-8131High
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/replymsg.php. Manipulation of the argument msgid results in SQL injection.
- CVE-2026-8129High
A vulnerability was identified in SourceCodester SUP Online Shopping version 1.0, affecting an unknown function in the wishlist.php file. Manipulating the delwlistid argument can lead to SQL injection.
- CVE-2026-8128High
A vulnerability was found in SourceCodester SUP Online Shopping 1.0 that allows SQL injection through manipulation of the msgid argument in the /admin/viewmsg.php file. The attack can be carried out remotely.
Original NVD description (English source)
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.