Projectworlds Online Shopping System
4 CVEs affecting Projectworlds Online Shopping System. Latest disclosed: 2025-10-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43157 | Critical | 9.8 | 2021-12-22 | Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php. |
CVE-2025-12215 | High | 7.3 | 2025-10-27 | A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing a manipulation of t… |
CVE-2025-11070 | High | 7.3 | 2025-09-27 | A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of… |
CVE-2021-43158 | Medium | 4.3 | 2021-12-22 | In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart. |