A vulnerability described as critical has been identified in SourceCodester E-Commerce Site 1.0. This vulnerability affects unknown code of the file /products.php. The manipulation of the argument Search results in sql injection.

This vulnerability is identified as CVE-2026-4613. The attack can be executed remotely. Additionally, an exploit exists.