CVE-2026-19903

MEDIUM 5.3

SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

CWE	CWE-552 CWE-425
Vendor	sourcecodester
Product	online clothing store
Published	Aug 15, 2026

Stay Ahead of the Next One

Get instant alerts for sourcecodester online clothing store

Be the first to know when new medium vulnerabilities affecting sourcecodester online clothing store are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SourceCodester / Online Clothing Store

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/390096 vuldb.com: https://vuldb.com/vuln/390096/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19903 vuldb.com: https://vuldb.com/submit/870782 medium.com: https://medium.com/@hemantrajbhati5555/sensitive-information-disclosure-via-publicly-accessible-sql-backup-leading-to-administrative-50bac3a307aa sourcecodester.com: https://www.sourcecodester.com/

Credits

🔍 Hemant Raj Bhati (VulDB User)