【中文导读】该 CVE 涉及SQL 注入（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.