PuneethReddyHC/online-shopping-system-advanced

PuneethReddyHC/online-shopping-system-advanced

Releases0

Stars425

Demo site

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-58316 ↗	Dec 12, 2025Friday, 12 December 2025, 21:15	7.5 HIGH	—
Online Shopping System Advanced 1.0 contains a SQL injection vulnerability in the payment_success.php script that allows attackers to inject malicious SQL through the unfiltered 'cm' parameter. Attackers can exploit the vulnerability by sending crafted SQL queries to retrieve sensitive database information by manipulating the user ID parameter.
CVE-2022-42109 ↗	Nov 29, 2022Tuesday, 29 November 2022, 04:15	9.8 CRITICAL	—
Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.