Description

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/left_cart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Related CPE's

a

fabian

online_product_reservation_system

1.0

Vulnerable

References

https://code-projects.org/

Product

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_left_cart.php.md

ExploitThird Party Advisory

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_left_cart.php.md#poc

ExploitThird Party Advisory

https://vuldb.com/?ctiid.339476

Permissions RequiredVDB Entry

https://vuldb.com/?id.339476

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.731095

Third Party AdvisoryVDB Entry

Weaknesses

[email protected]

Primary
CWE-74CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-05T10:15:58.467Z

1 week ago

Last modified

2026-01-09T14:43:58.450Z

1 week ago