CVE-2026-96602 — Abdurrab5 online-makeup-store Customer Login customerSignin.php sql injection
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulatio…
Published: 2026-09-23 · CVSS: 6.9 · CVSS 4.0
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7