CVE-2026-15703 in Simple and Nice Shopping Cart Script

Prediction

by VulDB Data Team • 07/14/2026

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-378250
• CPE: ready
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-15703
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15703
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-15703/