CyberRota Analysis
AI-GeneratedThe Online Shopping System 1.0 is vulnerable to SQL injection through the manipulation of the `total_count` argument in the `/checkout_process.php` file, allowing remote attackers to execute arbitrary SQL queries. This weakness poses a medium risk, as it could lead to unauthorized data access or manipulation. Organizations using this system should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argument total_count can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.