Online Shopping System vulnerabilities

2 known vulnerabilities in Online Shopping System from ProjectWorlds. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Online Shopping System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-12215Oct 27, 2025ProjectWorlds

  A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has

• 9.8 Critical severity

  Online Shopping System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2025-11070Sep 27, 2025ProjectWorlds

  A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publi