CVE-2026-8130
HighSummary
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to SQL injection.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a risk of unauthorized access to the database.
Recommendation
It is recommended to update the software to the latest version and secure the /admin/message.php file against unauthorized access.
Other vulnerabilities in SourceCodester SUP Online Shopping 1.0
See all- CVE-2026-8131High
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/replymsg.php. Manipulation of the argument msgid results in SQL injection.
- CVE-2026-8129High
A vulnerability was identified in SourceCodester SUP Online Shopping version 1.0, affecting an unknown function in the wishlist.php file. Manipulating the delwlistid argument can lead to SQL injection.
- CVE-2026-8128High
A vulnerability was found in SourceCodester SUP Online Shopping 1.0 that allows SQL injection through manipulation of the msgid argument in the /admin/viewmsg.php file. The attack can be carried out remotely.
Original NVD description (English source)
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS