CVE-2026-3148 in Simple and Nice Shopping Cart Script

Summary

by MITRE • 02/25/2026

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Disclosure: 02/25/2026
• Moderation: accepted
• Entry: VDB-347654
• CPE: ready
• CWE: CWE-89 (confirmed)
• Exploit: Download
• CVSS: 7.3 (VulDB)
• EPSS: 0.00039
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-3148
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-3148
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-3148/