CVE-2021-43158

CVE-2021-43158

EPSS 0.5%

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2 https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system/