CVE-2026-14767 – CodeAstro Ecommerce Website POST Parameter confirm.php sql injection

CVE ID :CVE-2026-14767

Published : July 5, 2026, 8:16 p.m. | 1 hour, 31 minutes ago

Description :A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. This affects an unknown part of the file /ecommerce-website-php/customer/confirm.php of the component POST Parameter Handler. The manipulation of the argument invoice_no results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…