SQL Injection Vulnerability in Abdurrab5 Online Makeup Store's Customer Login Handler

CVE-2026-96602

What is CVE-2026-96602?

A security flaw has been identified in the Abdurrab5 online makeup store, specifically within the customerSignin.php file. This vulnerability affects the Customer Login Handler component and allows an attacker to manipulate the username and password arguments, potentially leading to SQL injection. Notably, this exploit can be executed remotely, making it particularly concerning. The vendor has adopted a rolling release strategy, which limits the specification of affected versions. A notice was sent to the vendor regarding this discovery.

References