PatchTheCVEonline shopping system vulnerabilities and fixes
Recent CVEs affecting online shopping system, with upgrade or downgrade steps. 6 tracked.
Also searched as: onlineshoppingsystem.
online shopping system has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-01-08. Highest priority: CVE-2025-61246 (score 54/100).
- CVE-2025-9692 HIGH 7.3 DOWNGRADE A vulnerability was found in Campcodes Online Shopping System 1.0
- CVE-2025-9691 HIGH 7.3 DOWNGRADE A vulnerability has been found in Campcodes Online Shopping System 1.0
- CVE-2025-11070 HIGH 7.3 DOWNGRADE A vulnerability was identified in Projectworlds Online Shopping System 1.0
- CVE-2025-12215 HIGH 7.3 DOWNGRADE A flaw has been found in projectworlds Online Shopping System 1.0
- CVE-2025-61246 CRITICAL 9.8 DOWNGRADE indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the p
- CVE-2024-2832 LOW 3.5 DOWNGRADE A vulnerability classified as problematic was found in Campcodes Online Shopping System 1.0
FAQ
How do I fix online shopping system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is online shopping system being exploited right now?
None of the tracked online shopping system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which online shopping system CVE should I patch first?
CVE-2025-61246 currently ranks highest (54/100): indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the p.