CVE-2026-19229
Received Received - Intake

File and Directory Information Exposure in Online Clothing Store

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: VulDB

Description
A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /_notes/ of the component Dreamweaver Metadata Files. Executing a manipulation can lead to file and directory information exposure. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-07
AI Q&A
2026-08-07
EPSS Evaluated
N/A
NVD
CVE-2026-19229
EUVD
EUVD-2026-54564

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sourcecodester online_clothing_store *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-538 The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Online Clothing Store software. It involves an issue in the /_notes/ directory of Dreamweaver metadata files, which could expose file and directory information. The attack can be performed remotely and has been publicly disclosed.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive file and directory information, potentially leading to further attacks or data leaks. The impact includes information exposure but does not allow code execution or data modification.

Mitigation Strategies

Remove or restrict access to the /_notes/ directory in the Online Clothing Store installation. Ensure the directory is not publicly accessible via web server configurations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19229. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart