CVE-2026-14799

A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. Impacted is an unknown function of the file /customer/my_account.php?my_wishlist. The manipulation of the argument delete_wishlist results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

• CWE-74
• CWE-89

• https://codeastro.com/
• https://github.com/lilukun337/cve/issues/8
• https://vuldb.com/cve/CVE-2026-14799
• https://vuldb.com/submit/850850
• https://vuldb.com/vuln/376393
• https://vuldb.com/vuln/376393/cti

Published

Jul 6, 2026

Last Modified

Jul 6, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-14793A vulnerability was detected in Craft CMS up to 4.18.0.1. Af…4.3
• CVE-2026-14794A flaw has been found in Craft CMS up to 4.18.0.1. Affected …4.3
• CVE-2026-14795A vulnerability has been found in CodeAstro Apartment Visito…6.3
• CVE-2026-14796A vulnerability was found in CodeAstro Apartment Visitor Man…6.3
• CVE-2026-14797A vulnerability was determined in CodeAstro Apartment Visito…6.3
• CVE-2026-14798A vulnerability was identified in CodeAstro Apartment Visito…6.3
• CVE-2026-1480An out-of-band SQL injection vulnerability (OOB SQLi) has be…7.5
• CVE-2026-14800A weakness has been identified in imhamzaazam ecommerceFlask…4.3
• CVE-2026-14801A security vulnerability has been detected in GPAC 26.03-DEV…4.8
• CVE-2026-14802A vulnerability was detected in react create-react-app up to…7.3
• CVE-2026-14803Mojo::JSON versions before 9.47 for Perl allow memory exhaus…6.5
• CVE-2026-14804Use of hard-coded cryptographic key vulnerability in Bilin S…9.1