CVE-2026-19923
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A weakness was identified in code-projects Online Shopping System 1.0 in the file /checkout_process.php. Manipulating the total_count argument can lead to SQL injection. The attack can be launched remotely, and the exploit is public.
Risk Assessment
Risk of database integrity compromise and unauthorized access to customer data. The organization may suffer financial losses and loss of customer trust.
Recommendation
It is recommended to update the system or apply appropriate security measures such as parameterized SQL queries.
Original NVD description (English source)
A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argument total_count can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.