CodeAstro Ecommerce Website vulnerabilities
3 known CVE vulnerabilities in CodeAstro Ecommerce Website, translated and rated.
- CVE-2026-14799Medium
A SQL injection vulnerability has been discovered in CodeAstro Ecommerce Website 1.0 in the file /customer/my_account.php?my_wishlist. Manipulation of the delete_wishlist argument allows remote attackers to execute unauthorized database queries. The exploit has been publicly released, increasing the risk of attacks.
- CVE-2026-14767Medium
A SQL injection vulnerability has been discovered in CodeAstro Ecommerce Website 1.0 in the file /ecommerce-website-php/customer/confirm.php. An attacker can remotely manipulate the invoice_no argument, leading to unauthorized database access. The exploit has been publicly released, increasing the risk of attacks.
- CVE-2026-14639Medium
A SQL injection vulnerability has been found in CodeAstro Ecommerce Website 1.0 in the file /ecommerce-website-php/customer/my_account.php?edit_account. The attack involves manipulating the c_name argument, allowing remote SQL injection. The exploit has been publicly disclosed.