CVE-2026-19921

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0

Description An issue exists in the /homeaction.php file where improper handling of the cat id parameter allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate the database.

Recommendations Avoid using the cat id parameter in the /homeaction.php endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.