Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2021-43158
Disclosure Date: December 22, 2021 (last updated February 23, 2025)
In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.
0
Attacker Value
Unknown
CVE-2021-43157
Disclosure Date: December 22, 2021 (last updated February 23, 2025)
Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.
0
