CVE-2025-61246: Improper Neutralization of Special Elements used in an SQL Command

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/reviewaction.php via the proId parameter...

CVE-2025-61247: Improper Neutralization of Special Elements used in an SQL Command

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php...

CVE-2025-61247

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php...

PT-2021-23755

Name of the Vulnerable Software and Affected Versions Projectsworlds Online Shopping System PHP version 1.0 Description The issue concerns SQL injection via the id parameter in the "cart remove.php" file. This allows for potential manipulation of database queries. Recommendations For Projectsworl...

PT-2021-23756

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Shopping System PHP version 1.0 Description A CSRF issue in the cart remove.php file allows a remote attacker to remove any product from a customer's cart. Recommendations For ProjectWorlds Online Shopping System PHP versi...

CVE-2021-43157: Improper Neutralization of Special Elements used in an SQL Command

Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cartremove.php...