PT-2021-23755 · Unknown · Projectsworlds Online Shopping System

Khanhchauminh · Published 2021-12-22 · Updated 2025-10-29 · CVE-2021-43157

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Projectsworlds Online Shopping System PHP version 1.0

Description The issue concerns SQL injection via the id parameter in the "cart remove.php" file. This allows for potential manipulation of database queries.

Recommendations For Projectsworlds Online Shopping System PHP version 1.0, consider restricting access to the "cart remove.php" file until a proper fix is applied, and ensure that user input for the id parameter is properly sanitized to prevent SQL injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-43157

Affected Products

Projectsworlds Online Shopping System

References · 6

• 🔥 https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-43157 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43157 · Vendor Advisory
• https://t.me/cveNotify/140867 · Telegram Post
• https://t.me/cibsecurity/34524 · Telegram Post
• https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system · Note