A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdelete…

A SQL injection vulnerability has been identified in SourceCodester Simple and Nice Shopping Cart Script version 1.0. The vulnerability exists in the file /admin/girlsproductdeletequery.php, where manipulation of the user_id argument allows SQL injection attacks. The attack can be executed remotely without requiring physical access to the target system. A public exploit is already available, increasing the risk of active exploitation. The vulnerability affects an unknown function within the identified file. This represents a significant security risk for any organization or individual running this shopping cart script. The public availability of the exploit means threat actors could leverage it with minimal effort.