A vulnerability was found in code-projects Online Shopping System 1.0. It has been declared as critical. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argument total_count can lead to sql injection.
This vulnerability is tracked as CVE-2026-19923. The attack can be launched remotely. Moreover, an exploit is present.
