SourceCodester SUP Online Shopping 1.0 vulnerabilities
4 known CVE vulnerabilities in SourceCodester SUP Online Shopping 1.0, translated and rated.
- CVE-2026-8131High
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/replymsg.php. Manipulation of the argument msgid results in SQL injection.
- CVE-2026-8130High
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0, affecting an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to SQL injection.
- CVE-2026-8129High
A vulnerability was identified in SourceCodester SUP Online Shopping version 1.0, affecting an unknown function in the wishlist.php file. Manipulating the delwlistid argument can lead to SQL injection.
- CVE-2026-8128High
A vulnerability was found in SourceCodester SUP Online Shopping 1.0 that allows SQL injection through manipulation of the msgid argument in the /admin/viewmsg.php file. The attack can be carried out remotely.