NetSight
IP …
critical9.8

CVE-2021-46024

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required.

Impact

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required.

Affected products

VendorProductAffected versions
ProjectworldsOnline-Shopping-Webvsite-In-Php
Version 1.0

Weakness classification

CWE-89

References