CVE-2026-19923: code-projects Online Shopping System checkout_process.php sql injection
A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkoutprocess.php. Executing a manipulation of the argument totalcount can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19923?
The severity of CVE-2026-19923 is rated as medium, with a score of 6.3.
How does CVE-2026-19923 affect the Online Shopping System?
CVE-2026-19923 allows for SQL injection through manipulation of the total_count argument in the checkout_process.php file.
Can CVE-2026-19923 be exploited remotely?
Yes, CVE-2026-19923 can be exploited remotely.
What are the consequences of a successful exploit of CVE-2026-19923?
A successful exploit of CVE-2026-19923 can lead to unauthorized access and manipulation of the database.
How can I fix CVE-2026-19923?
To fix CVE-2026-19923, implement parameterized queries or prepared statements to prevent SQL injection vulnerabilities.