VULNERABILITY INTELLIGENCE
CVE-2026-14639
CVSS score6.3 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-07-04
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?edit_account. Such manipulation of the argument c_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Weakness classification
- cna@vuldb.com: CWE-74