PT-2021-23756 · Unknown · Projectsworlds Online Shopping System

Khanhchauminh · Published 2021-12-22 · Updated 2025-10-29 · CVE-2021-43158

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Shopping System PHP version 1.0

Description A CSRF issue in the cart remove.php file allows a remote attacker to remove any product from a customer's cart.

Recommendations For ProjectWorlds Online Shopping System PHP version 1.0, consider implementing proper CSRF protection mechanisms, such as token-based validation, to prevent unauthorized requests to the cart remove.php file. As a temporary workaround, restrict access to the cart remove.php file to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-43158

Affected Products

Projectsworlds Online Shopping System

References · 6

• 🔥 https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-43158 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43158 · Vendor Advisory
• https://t.me/cibsecurity/34515 · Telegram Post
• https://t.me/cveNotify/140868 · Telegram Post
• https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system · Note