Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Online Shopping System — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in Online Shopping System, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the vendor’s Online Shopping System, specifically focusing on software weaknesses and their corresponding tags. It collects a comprehensive range of security flaws reported over the past five years, covering critical issues such as injection attacks, broken access control, and cryptographic failures. Readers can use this resource to track the vendor’s security advisories, understand specific weakness classes within e-commerce platforms, and review the complete vulnerability history of this product. The data is organized to facilitate technical analysis rather than general browsing, allowing security professionals and developers to identify patterns in past incidents. By examining the aggregated records, users can assess the long-term security posture of the system and correlate specific weaknesses with remediation timelines. This collection serves as a reference point for evaluating risk exposure in online retail environments, providing context on how the vendor has addressed historical security gaps. The entries are filtered by severity and component, enabling targeted research into specific subsystems of the shopping platform. This structured overview supports informed decision-making regarding patch management and security architecture reviews for similar e-commerce deployments.

Vendor: Surya2Developer

CVE ID Title CVSS Severity Published
CVE-2026-85643 code-projects Online Shopping System adduser.php mysqli_query sql injection CWE-89 4.7 Medium 2026-09-04
CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection CWE-89 7.3 High 2026-08-31
CVE-2026-82700 code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scripting CWE-79 4.3 Medium 2026-08-31
CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting CWE-79 4.3 Medium 2026-08-25
CVE-2026-19998 code-projects Online Shopping System offersmail.php cross site scripting CWE-79 4.3 Medium 2026-08-17
CVE-2026-19923 code-projects Online Shopping System checkout_process.php sql injection CWE-89 6.3 Medium 2026-08-16
CVE-2026-19922 code-projects Online Shopping System checkout.php cross site scripting CWE-79 3.5 Low 2026-08-16
CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection CWE-89 6.3 Medium 2026-08-16
CVE-2026-19920 code-projects Online Shopping System action.php sql injection CWE-89 6.3 Medium 2026-08-15
CVE-2026-19919 code-projects Online Shopping System Login login.php sql injection CWE-89 7.3 High 2026-08-15
CVE-2025-12215 projectworlds Online Shopping System login_submit.php sql injection CWE-89 7.3 High 2025-10-27
CVE-2025-11070 Projectworlds Online Shopping System cart_add.php sql injection CWE-89 7.3 High 2025-09-27
CVE-2025-9692 Campcodes Online Shopping System product.php sql injection CWE-89 7.3 High 2025-08-30
CVE-2025-9691 Campcodes Online Shopping System login.php sql injection CWE-89 7.3 High 2025-08-30
CVE-2024-2832 Campcodes Online Shopping System offersmail.php cross site scripting CWE-79 3.5 Low 2024-03-23
CVE-2024-1971 Surya2Developer Online Shopping System POST Parameter login.php sql injection CWE-89 7.3 High 2024-02-28

All 16 known CVE vulnerabilities affecting Online Shopping System with full Chinese analysis, references, and POCs where available.