medium4.3
CVE-2021-43158
In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.
Impact
In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectworlds | Online Shopping System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2
- https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system/
- https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2
- https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system/