This vulnerability affects SourceCodester Online Clothing Store 1.0 and involves unauthorized access to files or directories through the /db/shopping.sql file in the SQL Database Backup component. The flaw allows remote exploitation without requiring privileges or user interaction. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges required, no user interaction, and low impact on confidentiality with no impact on integrity or availability. The vulnerability is publicly disclosed, but no vendor-provided fix or mitigation details are available at this time.

An attacker can remotely access files or directories on the affected system, potentially exposing sensitive data contained within the SQL database backup file. The impact is limited to information disclosure with low confidentiality impact and no direct integrity or availability impact as per the CVSS vector. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the /db/shopping.sql file and limiting external access to the affected application may reduce exposure.