← Database

CVE-2021-46024

CRITICAL CVSS: 9.8 Published: 2022-01-23 Modified: 2026-06-17

Description

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required.

Affected Platforms

Projectworlds Online-Shopping-Webvsite-In-Php

Weakness Type

CWE-89

References