Description

A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/left_cart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Related CPE's

Could not find any relations

References

https://code-projects.org/

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_left_cart.php.md

https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_left_cart.php.md#poc

https://vuldb.com/?ctiid.339476

https://vuldb.com/?id.339476

https://vuldb.com/?submit.731095

Weaknesses

[email protected]

Primary
CWE-74CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Received

Published

2026-01-05T10:15:58.467Z

42 hours ago

Last modified

2026-01-05T10:15:58.467Z

42 hours ago