Projectworlds Online Shopping System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Projectworlds Online Shopping System: 2 record(s), with affected versions and fixes.cpe:2.3:a:projectworlds:online_shopping_system
CVE-2025-12215
Critical · 9.8
CWE-89 Oct 27, 2025
projectworlds Online Shopping System login_submit.php sql injection
A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
CVE-2025-11070
Critical · 9.8
CWE-74 Sep 27, 2025
Projectworlds Online Shopping System cart_add.php sql injection
A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.