A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the compo…

A SQL injection vulnerability has been identified in SourceCodester Simple and Nice Shopping Cart Script version 1.0. The flaw exists in the /admin/login.php file within the Admin Login component. Attackers can manipulate the Username argument to perform SQL injection attacks. The vulnerability can be exploited remotely without requiring physical access. A public exploit has been disclosed, increasing the risk of active exploitation. The vulnerability affects the authentication mechanism, potentially allowing attackers to bypass login controls. This could lead to unauthorized administrative access to the shopping cart application. The issue has been assigned CVE-2026-14652 and is tracked in NVD and VulDB databases.