Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required.
References
Link | Resource |
---|---|
https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/3 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2022-01-23 09:15
Updated : 2022-01-27 08:12
NVD link : CVE-2021-46024
Mitre link : CVE-2021-46024
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
projectworlds
- online-shopping-webvsite-in-php