What is CVE-2026-19903?

CVE-2026-19903 is a medium-severity vulnerability in Sourcecodester Online Clothing Store, classified under Direct Request (Forced Browsing). CVSS score: 5.3/10. Published 2026-08-15.

How severe is CVE-2026-19903?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Sourcecodester Online Clothing Store

CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Sourcecodester Online Clothing Store — versions 1.0

Weakness classification (CWE)

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit, broken-link)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-19903?: CVE-2026-19903 is a medium-severity vulnerability in Sourcecodester Online Clothing Store, classified under Direct Request (Forced Browsing). CVSS score: 5.3/10. Published 2026-08-15.
How severe is CVE-2026-19903?: Medium severity. CVSS v3 base score is 5.3 out of 10.