Vulnerabilidades do Projectworlds Online Shopping System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Projectworlds Online Shopping System: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:projectworlds:online_shopping_system
CVE-2025-12215
Crítica · 9.8
CWE-89 27/10/2025
projectworlds Online Shopping System login_submit.php sql injection
A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
CVE-2025-11070
Crítica · 9.8
CWE-74 27/09/2025
Projectworlds Online Shopping System cart_add.php sql injection
A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.