https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:15:04.284074+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-14767 CVE-2026-14767 — CodeAstro Ecommerce Website POST Parameter confirm.php sql injection 2026-09-28T14:15:04.355947+00:00

Affected: CodeAstro Ecommerce Website

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST Parameter Handler. The manipulation of the argument invoice_no results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.