Projectworlds Online Shopping System vulnerabilities

4 vulnerabilities

Known vulnerabilities in Projectworlds Online Shopping System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-43157projectworldsonline_shopping_system
EPSS score
1.17%
Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.4.3CVE-2021-43158projectworldsonline_shopping_system
EPSS score
0.47%
In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.9.8CVE-2025-11070projectworldsonline_shopping_system
EPSS score
0.48%
A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.9.8CVE-2025-12215projectworldsonline_shopping_system
EPSS score
0.42%
A flaw has been found in projectworlds Online Shopping System 1.0. Impacted is an unknown function of the file /login_submit.php. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.