Ghostwire

CVE-2026-14639: A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file...

MEDIUM CVSS 6.3 Exploit Available

Published: July 4, 2026 | Last Modified: July 4, 2026

Description

A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?edit_account. Such manipulation of the argument c_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

codeastro.com/
github.com/Laichen-0/CVE/issues/1
vuldb.com/cve/CVE-2026-14639
vuldb.com/submit/845974
vuldb.com/vuln/376155
vuldb.com/vuln/376155/cti
www.tenable.com/cve/CVE-2026-14639
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-14639