CVE-2026-19903CWE-425CWE-552

CVE-2026-19903

Medium · published August 15, 2026

CVSS v3.1
5.3
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00532 · 44.1th percentile
Weaknesses
CWE-425 · Direct Request ('Forced Browsing'); CWE-552 · Files or Directories Accessible to External Parties
Published
2026-08-15T22:16Z
References (7)
https://medium.com/@hemantrajbhati5555/sensitive-information-disclosure-via-publicly-accessible-sql-backup-leading-to-administrative-50bac3a307aa · [email protected]https://vuldb.com/cve/CVE-2026-19903 · [email protected]https://vuldb.com/submit/870782 · [email protected]https://vuldb.com/vuln/390096 · [email protected]https://vuldb.com/vuln/390096/cti · [email protected]https://www.sourcecodester.com/ · [email protected]https://medium.com/@hemantrajbhati5555/sensitive-information-disclosure-via-publicly-accessible-sql-backup-leading-to-administrative-50bac3a307aa · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 15 AUG 17:45Z
    SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access
    cvelistv5