CyberRota Analysis
AI-GeneratedThe Online Shopping System 1.0 is vulnerable to SQL injection through the Search Functionality in the /action.php file, allowing remote attackers to manipulate the 'keyword' argument. This could lead to unauthorized access to the database, potentially exposing sensitive data or enabling further attacks. Organizations using this system should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.