Dirac231

**Name of the Vulnerable Software and Affected Versions** PuneethReddyHC Online Shopping system advanced version 1.0 **Description** The issue allows an attacker to execute arbitrary code. An unauthenticated remote attacker can manipulate the `address1` variable in the "register.php" endpoint. **Recommendations** For version 1.0, patch immediately and validate user input to prevent exploitation. As a temporary workaround, consider restricting access to the "register.php" endpoint until a patch is available. Avoid using the `address1` variable in the affected endpoint until the issue is resolved.