CVE:CVE-2022-42109
CNNVD:CNNVD-202211-3614
Online-shopping-system-advanced是Puneeth Reddy H C个人开发者的一个在线购物系统。
Online-shopping-system-advanced 1.0版本存在安全漏洞，该漏洞源于通过/shopping/product.php中的p参数发现包含SQL注入漏洞。
solution:Upgrade online-shopping-system-advanced_project online-shopping-system-advanced to a higher version than 1.0,and avoid the version 1.0