CVE-2026-8131
HighSummary
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/replymsg.php. Manipulation of the argument msgid results in SQL injection.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a serious threat to the integrity of the data in the system.
Recommendation
It is recommended to immediately update the system to the latest version and implement additional protections against SQL injection.
Other vulnerabilities in SourceCodester SUP Online Shopping 1.0
See all- CVE-2026-8130High
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to SQL injection.
- CVE-2026-8129High
A vulnerability was identified in SourceCodester SUP Online Shopping version 1.0, affecting an unknown function in the wishlist.php file. Manipulating the delwlistid argument can lead to SQL injection.
- CVE-2026-8128High
A vulnerability was found in SourceCodester SUP Online Shopping 1.0 that allows SQL injection through manipulation of the msgid argument in the /admin/viewmsg.php file. The attack can be carried out remotely.
Original NVD description (English source)
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument msgid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.