Cross-Site Request Forgery Vulnerability in imhamzaazam Ecommerce Platform
CVE-2026-14800

5.3MEDIUM

Key Information:

Vendor

Imhamzaazam

Status
Ecommerceflask
Vendor
CVE Published:
6 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-14800?

A vulnerability has been discovered in the imhamzaazam ecommerceFlask platform, affecting versions prior to cb7d9e24c30a99379651b7493b32048126ef402b. This weakness can lead to unauthorized commands being transmitted from an authenticated user to the application without their consent. Since this issue can be exploited remotely, it poses a significant risk to users' data and actions on the platform. Despite the reported issue, the development team has yet to respond or provide a patch, leaving users potentially exposed to exploitation. Regular updates and reviews of security practices are highly recommended for users to safeguard against such vulnerabilities.

Affected Version(s)

ecommerceFlask cb7d9e24c30a99379651b7493b32048126ef402b

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-14800 - Proof of Concept

References

https://vuldb.com/vuln/376394
vdb-entry
https://vuldb.com/vuln/376394/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-14800
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

flashzyc (VulDB User)
VulDB CNA Team
.