CVE-2026-19903 MEDIUM

CVE-2026-19903: SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access

Vendor Sourcecodester
Product Online Clothing Store
Weakness CWE-552 · Files accessible externally
Published August 15, 2026
Last update August 15, 2026
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

August 15, 2026 CVE published